Andrew Cooper 14bcad6593 x86/spec-ctrl: Mitigate Transitive Scheduler Attacks ...

TSA affects AMD Fam19h CPUs (Zen3 and 4 microarchitectures).

Three new CPUID bits have been defined.  Two (TSA_SQ_NO and TSA_L1_NO)
indicate that the system is unaffected, and must be synthesised by Xen on
unaffected parts to date.

A third new bit indicates that VERW now has a flushing side effect.  Xen must
synthesise this bit on affected systems based on microcode version.  As with
other VERW-based flushing features, VERW_CLEAR needs OR-ing across a resource
pool, and guests which have seen it can safely migrate in.

This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.

Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Reviewed-by: Jan Beulich <jbeulich@suse.com>
(cherry picked from commit 578b34adb1)

2025-07-08 15:10:58 +01:00

..

.gitignore

tools/tests: Drop obsolete mce-test infrastructure

2021-07-09 16:38:27 +01:00

Makefile

tools: Remove -Werror everywhere else

2022-10-14 16:17:41 +01:00

mkdeb

mkdeb: use compression level 0

2018-09-07 15:06:00 +01:00

mkhex

mkhex: Move it to tools/misc

2017-10-05 09:27:32 -04:00

mkrpm

rpmball: Adjust to new rpm, do not require --force

2020-08-14 17:18:56 +01:00

mktarball

mktarball: For qemu upstream, use their scripts/archive-source.sh

2018-04-17 18:21:30 +01:00

xen-access.c

xen: move include/asm-* to arch/*/include/asm

2021-12-15 10:14:13 +01:00

xen-cpuid.c

x86/spec-ctrl: Mitigate Transitive Scheduler Attacks

2025-07-08 15:10:58 +01:00

xen-detect.c

tools/xen-detect: avoid possible pitfall with cpuid()

2022-01-06 16:12:15 +01:00

xen-diag.c

tools: Move ARRAY_SIZE() into xen-tools/libs.h

2018-07-04 17:25:37 +01:00

xen-hptool.c

tools/misc: don't use libxenctrl internals from xen-hptool

2020-09-09 10:57:25 +00:00

xen-hvmcrash.c

tools/misc: xen-hvmcrash: New tool to attempt to crash HVM guests

2010-07-29 18:58:19 +01:00

xen-hvmctx.c

viridian: introduce struct viridian_page

2018-11-09 11:40:12 +01:00

xen-livepatch.c

livepatch: Add metadata runtime retrieval mechanism

2019-12-13 14:45:32 +00:00

xen-lowmemd.c

tools: drop all deprecated usages of xs_*_open() and friends in tools

2020-10-08 12:47:59 +00:00

xen-mceinj.c

tools/tests: Drop obsolete mce-test infrastructure

2021-07-09 16:38:27 +01:00

xen-memshare.c

tools: Move memshrtool from tests/ to misc/

2021-01-13 19:30:50 +00:00

xen-mfndump.c

tools/misc: drop all libxc internals from xen-mfndump.c

2020-09-09 10:57:25 +00:00

xen-ucode.c

x86/ucode: Distinguish "ucode already up to date"

2024-05-21 11:59:36 +02:00

xen-vmtrace.c

tools/misc/xen-vmtrace: handle more signals and install by default

2021-07-09 16:38:25 +01:00

xencons

bitkeeper revision 1.1159.187.78 (41c9d4768ZT219TwwhKCb8dfwHcdkA)

2004-12-22 20:09:26 +00:00

xencov_split

tools: Use INSTALL_PYTHON_PROG

2020-05-19 11:40:53 +01:00

xencov.c

gcov: rename sysctl and functions

2018-01-25 12:27:44 +01:00

xenhypfs.c

tools/misc: Use const whenever we point to literal strings

2021-05-18 14:54:05 +01:00

xenlockprof.c

Various: Fix typo `reseting'

2018-10-08 15:20:18 +01:00

xenperf.c

xenperf: omit meaningless trailing zeroes from output

2022-01-04 10:21:12 +01:00

xenpm.c

tools/libxc: Drop copy-in in xc_physinfo()

2022-01-05 09:44:26 +00:00

xenpvnetboot

Replace FSF street address with canonical URL

2015-07-29 11:14:07 +01:00

xensymoops

bitkeeper revision 1.1159.137.1 (41811b328SwfN4BTxZsoMM-iGa8evQ)

2004-10-28 16:15:46 +00:00

xenwatchdogd.c

xenwatchdogd: Fix build errors

2010-06-07 07:16:43 +01:00