SUPPORT.md: Document speculative attacks status of non-shim 32-bit PV

This documents, but does not fix, XSA-370.

Reported-by: Jann Horn <jannh@google.com>
Signed-off-by: Ian Jackson <ian.jackson@eu.citrix.com>
Signed-off-by: George Dunlap <george.dunlap@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
This commit is contained in:
Ian Jackson authored and Jan Beulich committed 2021-05-04 14:58:03 +02:00
1 parent eb1f325186
commit 280d472f4f
1 file changed
+10 -1
+10 -1
View File
@@ -84,7 +84,16 @@ Traditional Xen PV guest
No hardware requirements
Status: Supported
Status, x86_64: Supported
Status, x86_32, shim: Supported
Status, x86_32, without shim: Supported, with caveats
Due to architectural limitations,
32-bit PV guests must be assumed to be able to read arbitrary host memory
using speculative execution attacks.
Advisories will continue to be issued
for new vulnerabilities related to un-shimmed 32-bit PV guests
enabling denial-of-service attacks or privilege escalation attacks.
### x86/HVM
Reference in new issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.