x86/bugs: Add attack vector controls for SRBDS

Use attack vector controls to determine if SRBDS mitigation is required.

Signed-off-by: David Kaplan <david.kaplan@amd.com>
Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Link: https://lore.kernel.org/20250707183316.1349127-10-david.kaplan@amd.com
This commit is contained in:
David Kaplan 2025-07-07 13:33:04 -05:00 committed by Borislav Petkov (AMD)
parent 54b53dca65
commit 71dc301c26

View File

@ -870,13 +870,19 @@ void update_srbds_msr(void)
static void __init srbds_select_mitigation(void)
{
if (!boot_cpu_has_bug(X86_BUG_SRBDS) || cpu_mitigations_off()) {
if (!boot_cpu_has_bug(X86_BUG_SRBDS)) {
srbds_mitigation = SRBDS_MITIGATION_OFF;
return;
}
if (srbds_mitigation == SRBDS_MITIGATION_AUTO)
srbds_mitigation = SRBDS_MITIGATION_FULL;
if (srbds_mitigation == SRBDS_MITIGATION_AUTO) {
if (should_mitigate_vuln(X86_BUG_SRBDS))
srbds_mitigation = SRBDS_MITIGATION_FULL;
else {
srbds_mitigation = SRBDS_MITIGATION_OFF;
return;
}
}
/*
* Check to see if this is one of the MDS_NO systems supporting TSX that