Andrew Cooper 4112b5c6a2 x86/ucode: Refine the boundary checks for Entrysign ...

After initial publication, the SB-7033 / CVE-2024-36347 bulletin was updated
to list Zen5 CPUs as vulnerable.  Use Fam1ah as an upper bound, and adjust the
command line documentation.

When the Zen6 (also Fam1ah processors) model numbers are known, they'll want
excluding from the range.

Fixes: 630e8875ab ("x86/ucode: Perform extra SHA2 checks on AMD Fam17h/19h microcode")
Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Jan Beulich <jbeulich@suse.com>
Release-Acked-By: Oleksii Kurochko <oleksii.kurochko@gmail.com>
(cherry picked from commit c2529496d0)

2025-10-28 18:18:20 +00:00

..

arm

docs/arm: Document where Xen should be loaded in memory

2023-10-25 11:02:33 +01:00

xen-makefiles

docs/misc: fix document typo

2023-07-20 10:03:53 +02:00

9pfs.pandoc

xen/public: move xenstore related doc into 9pfs.h

2023-02-06 08:52:15 +01:00

amd-ucode-container.txt

docs, amd_ucode: condense amd_ucode notes

2014-10-16 10:07:56 +02:00

block-scripts.txt

hotplug/FreeBSD: document disk hotplug interface

2016-04-06 15:50:45 +01:00

console.txt

xen/arm: vpl011: Update documentation for vuart console support

2017-10-03 15:23:38 -07:00

crashdb.txt

build: convert crash_debug to Kconfig

2016-06-08 14:09:16 +02:00

distro_mapping.txt

Config.mk: Remove unused setvar_dir macro

2019-12-13 16:30:34 +00:00

dump-core-format.txt

dump-core: update the documentation

2009-01-15 12:40:48 +00:00

efi.pandoc

EFI: strip xen.efi when putting it on the EFI partition

2022-07-18 17:48:40 +02:00

grant-tables.txt

gnttab: split maptrack lock to make it fulfill its purpose again

2017-08-15 15:07:25 +02:00

hvm-emulated-unplug.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

hypfs-paths.pandoc

xen/cpupool: make per-cpupool sched-gran hypfs node writable

2021-01-22 12:15:21 +01:00

kexec_and_kdump.txt

kexec: provide user friendly option for memory limit

2017-06-09 14:11:37 +02:00

libxl_memory.txt

docs: initial documentation for xenstore paths

2012-10-01 17:54:11 +01:00

livepatch.pandoc

build: Use HTTPS for all xenbits.xen.org Git repos

2023-03-24 16:29:13 +00:00

netif-staging-grants.pandoc

docs/misc: add netif staging grants design document

2017-10-05 09:27:25 -04:00

printk-formats.txt

print: introduce a format specifier for pci_sbdf_t

2020-07-28 19:33:28 +01:00

pv-drivers-lifecycle.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

pvcalls.pandoc

pvcalls: Document correctly and explicitely the padding for all arches

2020-07-10 09:52:24 -07:00

pvh.pandoc

x86/pvh: drop v2 suffix from pvh.pandoc

2020-02-25 17:21:45 +00:00

qemu-backends.txt

docs: add misc/qemu-backends.txt

2016-04-20 18:59:11 +01:00

status-override-table-spec.fodt

docs: convert STAO from odt to fodt

2017-02-15 11:40:16 -08:00

stubdom.txt

Document ioemu Linux stubdomain protocol

2020-05-18 23:23:44 +01:00

support-matrix-head.html

docs: Provide support-matrix-generate, to generate a support matrix in HTML

2018-04-12 16:13:49 +01:00

vtd-pi.txt

VT-d Posted-intterrupt (PI) design

2015-12-10 13:11:25 +01:00

vtd.txt

docs etc.: https: Fix references to wiki.xen[project].org

2020-03-30 15:27:06 +01:00

vtpm-platforms.txt

vtpmmgr: use XSM label as vTPM kernel hash

2014-04-23 11:58:26 +01:00

x86-xenpv-bootloader.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

xen_config.html

tools: vnet: Remove

2011-03-25 21:59:20 +00:00

xen-command-line.pandoc

x86/ucode: Refine the boundary checks for Entrysign

2025-10-28 18:18:20 +00:00

xen-env-table-spec.fodt

docs: convert XENV from odt to fodt

2017-02-15 11:40:37 -08:00

xen-error-handling.txt

docs: Add description of BUILD_BUG_ON().

2008-12-04 16:36:43 +00:00

xenmon.txt

docs: Move misc README's into docs/misc/

2015-08-27 19:14:17 +01:00

xenpaging.txt

docs: update xenpaging.txt

2012-08-30 17:57:31 +01:00

xenstore-paths.pandoc

docs: fix complex-and-wrong xenstore-path wording

2023-05-26 09:15:39 +02:00

xenstore-ring.txt

tools/xenstore: add documentation for extended watch command

2022-09-08 09:28:30 +02:00

xenstore.txt

tools/xenstore: remember global and per domain max accounting values

2023-06-07 12:10:31 +01:00

xl-psr.pandoc

docs/markdown: Switch to using pandoc, and fix underscore escaping

2019-01-02 17:50:36 +00:00

xsm-flask.txt

flask/label-pci: Allow specifying optional irq label

2023-03-14 10:46:00 +01:00