]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
x86/kvm: Update spectre-v1 mitigation
authorDan Williams <dan.j.williams@intel.com>
Thu, 1 Feb 2018 01:47:03 +0000 (17:47 -0800)
committerSeth Forshee <seth.forshee@canonical.com>
Thu, 8 Feb 2018 03:08:36 +0000 (21:08 -0600)
commitbcaf287cb6554fb425a7a48f2eefcbe9bd46891a
tree29b609e22ba98179e7c05eef544bd403ec1f2040
parent4b0be90fd3fd3734e17b17d6fb30293f00dda746
x86/kvm: Update spectre-v1 mitigation

BugLink: http://bugs.launchpad.net/bugs/1748072
commit 085331dfc6bbe3501fb936e657331ca943827600

Commit 75f139aaf896 "KVM: x86: Add memory barrier on vmcs field lookup"
added a raw 'asm("lfence");' to prevent a bounds check bypass of
'vmcs_field_to_offset_table'.

The lfence can be avoided in this path by using the array_index_nospec()
helper designed for these types of fixes.

Signed-off-by: Dan Williams <dan.j.williams@intel.com>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Acked-by: Paolo Bonzini <pbonzini@redhat.com>
Cc: Andrew Honig <ahonig@google.com>
Cc: kvm@vger.kernel.org
Cc: Jim Mattson <jmattson@google.com>
Link: https://lkml.kernel.org/r/151744959670.6342.3001723920950249067.stgit@dwillia2-desk3.amr.corp.intel.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Seth Forshee <seth.forshee@canonical.com>
arch/x86/kvm/vmx.c