Andrew Cooper 028ef76307 x86/spec-ctrl: Support BHI_DIS_S in order to mitigate BHI ...

Introduce a "bhi-dis-s" boolean to match the other options we have for
MSR_SPEC_CTRL values.  Also introduce bhi_calculations().

Use BHI_DIS_S whenever possible.

Guests which are levelled to be migration compatible with older CPUs can't see
BHI_DIS_S, and Xen must fill in the difference to make the guest safe.  Use
the virt MSR_SPEC_CTRL infrastructure to force BHI_DIS_S behind the guest's
back.

This is part of XSA-456 / CVE-2024-2201.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Roger Pau Monné <roger.pau@citrix.com>
(cherry picked from commit 62a1106415)

2024-04-09 17:10:28 +01:00

..

arm

xen/arm: Add Cortex-A77 erratum 1508412 handling

2023-08-01 16:08:57 -07:00

xen-makefiles

xen/build: introduce if_changed and if_changed_rule

2020-04-24 15:01:11 +02:00

9pfs.pandoc

docs etc.: https: Fix references to other Xen pages

2020-03-30 15:27:17 +01:00

amd-ucode-container.txt

docs, amd_ucode: condense amd_ucode notes

2014-10-16 10:07:56 +02:00

block-scripts.txt

hotplug/FreeBSD: document disk hotplug interface

2016-04-06 15:50:45 +01:00

console.txt

xen/arm: vpl011: Update documentation for vuart console support

2017-10-03 15:23:38 -07:00

crashdb.txt

build: convert crash_debug to Kconfig

2016-06-08 14:09:16 +02:00

distro_mapping.txt

Config.mk: Remove unused setvar_dir macro

2019-12-13 16:30:34 +00:00

dump-core-format.txt

dump-core: update the documentation

2009-01-15 12:40:48 +00:00

efi.pandoc

arm/efi: Handle Xen bootargs from both xen.cfg and DT

2022-03-10 09:41:53 -08:00

grant-tables.txt

gnttab: split maptrack lock to make it fulfill its purpose again

2017-08-15 15:07:25 +02:00

hvm-emulated-unplug.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

hypfs-paths.pandoc

xen/cpupool: make per-cpupool sched-gran hypfs node writable

2021-01-22 12:15:21 +01:00

kconfig-language.rst

xen: Update Kconfig to Linux v5.4

2020-01-30 11:54:33 +00:00

kconfig-macro-language.rst

xen: Update Kconfig to Linux v5.4

2020-01-30 11:54:33 +00:00

kconfig.rst

xen: Update Kconfig to Linux v5.4

2020-01-30 11:54:33 +00:00

kexec_and_kdump.txt

kexec: provide user friendly option for memory limit

2017-06-09 14:11:37 +02:00

libxl_memory.txt

docs: initial documentation for xenstore paths

2012-10-01 17:54:11 +01:00

livepatch.pandoc

docs etc.: https: Fix references to other Xen pages

2020-03-30 15:27:17 +01:00

netif-staging-grants.pandoc

docs/misc: add netif staging grants design document

2017-10-05 09:27:25 -04:00

printk-formats.txt

print: introduce a format specifier for pci_sbdf_t

2020-07-28 19:33:28 +01:00

pv-drivers-lifecycle.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

pvcalls.pandoc

pvcalls: Document correctly and explicitely the padding for all arches

2020-07-10 09:52:24 -07:00

pvh.pandoc

x86/pvh: drop v2 suffix from pvh.pandoc

2020-02-25 17:21:45 +00:00

qemu-backends.txt

docs: add misc/qemu-backends.txt

2016-04-20 18:59:11 +01:00

status-override-table-spec.fodt

docs: convert STAO from odt to fodt

2017-02-15 11:40:16 -08:00

stubdom.txt

Document ioemu Linux stubdomain protocol

2020-05-18 23:23:44 +01:00

support-matrix-head.html

docs: Provide support-matrix-generate, to generate a support matrix in HTML

2018-04-12 16:13:49 +01:00

vtd-pi.txt

VT-d Posted-intterrupt (PI) design

2015-12-10 13:11:25 +01:00

vtd.txt

docs etc.: https: Fix references to wiki.xen[project].org

2020-03-30 15:27:06 +01:00

vtpm-platforms.txt

vtpmmgr: use XSM label as vTPM kernel hash

2014-04-23 11:58:26 +01:00

x86-xenpv-bootloader.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

xen_config.html

tools: vnet: Remove

2011-03-25 21:59:20 +00:00

xen-command-line.pandoc

x86/spec-ctrl: Support BHI_DIS_S in order to mitigate BHI

2024-04-09 17:10:28 +01:00

xen-env-table-spec.fodt

docs: convert XENV from odt to fodt

2017-02-15 11:40:37 -08:00

xen-error-handling.txt

docs: Add description of BUILD_BUG_ON().

2008-12-04 16:36:43 +00:00

xenmon.txt

docs: Move misc README's into docs/misc/

2015-08-27 19:14:17 +01:00

xenpaging.txt

docs: update xenpaging.txt

2012-08-30 17:57:31 +01:00

xenstore-paths.pandoc

public/io/netif: specify MTU override node

2020-08-27 10:03:54 +00:00

xenstore-ring.txt

xenstore: extend the xenstore ring with a 'closing' signal

2014-10-08 14:29:08 +01:00

xenstore.txt

docs: enhance xenstore.txt with permissions description

2022-11-01 14:07:24 +00:00

xl-psr.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

xsm-flask.txt

docs etc.: https: Fix references to other Xen pages

2020-03-30 15:27:17 +01:00