Andrew Cooper 070e8ce9d3 x86/tsx: Introduce tsx= to use MSR_TSX_CTRL when available ...

To protect against the TSX Async Abort speculative vulnerability, Intel have
released new microcode for affected parts which introduce the MSR_TSX_CTRL
control, which allows TSX to be turned off.  This will be architectural on
future parts.

Introduce tsx= to provide a global on/off for TSX, including its enumeration
via CPUID.  Provide stub virtualisation of this MSR, as it is not exposed to
guests at the moment.

VMs may have booted before microcode is loaded, or before hosts have rebooted,
and they still want to migrate freely.  A VM which booted seeing TSX can
migrate safely to hosts with TSX disabled - TSX will start unconditionally
aborting, but still behave in a manner compatible with the ABI.

The guest-visible behaviour is equivalent to late loading the microcode and
setting the RTM_DISABLE bit in the course of live patching.

This is part of XSA-305 / CVE-2019-11135

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>

2019-11-12 17:12:54 +00:00

..

arm

xen/docs: arm: Update dom0less binding and example

2019-10-10 15:50:00 +01:00

9pfs.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

amd-ucode-container.txt

docs, amd_ucode: condense amd_ucode notes

2014-10-16 10:07:56 +02:00

block-scripts.txt

hotplug/FreeBSD: document disk hotplug interface

2016-04-06 15:50:45 +01:00

console.txt

xen/arm: vpl011: Update documentation for vuart console support

2017-10-03 15:23:38 -07:00

crashdb.txt

build: convert crash_debug to Kconfig

2016-06-08 14:09:16 +02:00

distro_mapping.txt

Add configure --with-sysconfig-leaf-dir=SUBDIR to set CONFIG_LEAF_DIR

2014-10-06 17:00:22 +01:00

dump-core-format.txt

dump-core: update the documentation

2009-01-15 12:40:48 +00:00

efi.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

grant-tables.txt

gnttab: split maptrack lock to make it fulfill its purpose again

2017-08-15 15:07:25 +02:00

hvm-emulated-unplug.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

kconfig-language.txt

build: import Kbuild/Kconfig from Linux 4.3

2015-12-16 17:25:15 +01:00

kconfig.txt

build: import Kbuild/Kconfig from Linux 4.3

2015-12-16 17:25:15 +01:00

kexec_and_kdump.txt

kexec: provide user friendly option for memory limit

2017-06-09 14:11:37 +02:00

libxl_memory.txt

docs: initial documentation for xenstore paths

2012-10-01 17:54:11 +01:00

livepatch.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

netif-staging-grants.pandoc

docs/misc: add netif staging grants design document

2017-10-05 09:27:25 -04:00

printk-formats.txt

xen/vsprintf: Introduce %*pb[l] for printing bitmaps

2018-10-22 13:39:22 +01:00

pv-drivers-lifecycle.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

pvcalls.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

pvh.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

qemu-backends.txt

docs: add misc/qemu-backends.txt

2016-04-20 18:59:11 +01:00

status-override-table-spec.fodt

docs: convert STAO from odt to fodt

2017-02-15 11:40:16 -08:00

stubdom.txt

docs: Move misc README's into docs/misc/

2015-08-27 19:14:17 +01:00

support-matrix-head.html

docs: Provide support-matrix-generate, to generate a support matrix in HTML

2018-04-12 16:13:49 +01:00

vtd-pi.txt

VT-d Posted-intterrupt (PI) design

2015-12-10 13:11:25 +01:00

vtd.txt

tools: introduce some new parameters to set rdm policy

2015-07-23 13:45:25 +01:00

vtpm-platforms.txt

vtpmmgr: use XSM label as vTPM kernel hash

2014-04-23 11:58:26 +01:00

x86-xenpv-bootloader.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

xen_config.html

tools: vnet: Remove

2011-03-25 21:59:20 +00:00

xen-command-line.pandoc

x86/tsx: Introduce tsx= to use MSR_TSX_CTRL when available

2019-11-12 17:12:54 +00:00

xen-env-table-spec.fodt

docs: convert XENV from odt to fodt

2017-02-15 11:40:37 -08:00

xen-error-handling.txt

docs: Add description of BUILD_BUG_ON().

2008-12-04 16:36:43 +00:00

xenmon.txt

docs: Move misc README's into docs/misc/

2015-08-27 19:14:17 +01:00

xenpaging.txt

docs: update xenpaging.txt

2012-08-30 17:57:31 +01:00

xenstore-paths.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

xenstore-ring.txt

xenstore: extend the xenstore ring with a 'closing' signal

2014-10-08 14:29:08 +01:00

xenstore.txt

docs: remove wrong statement about bug in xenstore

2016-10-26 12:38:07 +01:00

xl-psr.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

xsm-flask.txt

docs: remove tmem related text

2019-05-13 11:28:27 +01:00