debian/patches/extra/0001-target-i386-add-MDS-NO-feature.patch

   1 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
   2 From: Paolo Bonzini <pbonzini@redhat.com>
   3 Date: Thu, 16 May 2019 20:53:20 +0200
   4 Subject: [PATCH] target/i386: add MDS-NO feature
   5
   6 Microarchitectural Data Sampling is a hardware vulnerability which allows
   7 unprivileged speculative access to data which is available in various CPU
   8 internal buffers.
   9
  10 Some Intel processors use the ARCH_CAP_MDS_NO bit in the
  11 IA32_ARCH_CAPABILITIES
  12 MSR to report that they are not vulnerable, make it available to guests.
  13
  14 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
  15 Message-Id: <20190516185320.28340-1-pbonzini@redhat.com>
  16 Signed-off-by: Eduardo Habkost <ehabkost@redhat.com>
  17 Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
  18 ---
  19  target/i386/cpu.c | 2 +-
  20  1 file changed, 1 insertion(+), 1 deletion(-)
  21
  22 diff --git a/target/i386/cpu.c b/target/i386/cpu.c
  23 index d6bb57d210..ee4b8b47e2 100644
  24 --- a/target/i386/cpu.c
  25 +++ b/target/i386/cpu.c
  26 @@ -1183,7 +1183,7 @@ static FeatureWordInfo feature_word_info[FEATURE_WORDS] = {
  27          .type = MSR_FEATURE_WORD,
  28          .feat_names = {
  29              "rdctl-no", "ibrs-all", "rsba", "skip-l1dfl-vmentry",
  30 -            "ssb-no", NULL, NULL, NULL,
  31 +            "ssb-no", "mds-no", NULL, NULL,
  32              NULL, NULL, NULL, NULL,
  33              NULL, NULL, NULL, NULL,
  34              NULL, NULL, NULL, NULL,