Mark Gross b65105dc42 x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation ... commit 7e5b3c267d upstream SRBDS is an MDS-like speculative side channel that can leak bits from the random number generator (RNG) across cores and threads. New microcode serializes the processor access during the execution of RDRAND and RDSEED. This ensures that the shared buffer is overwritten before it is released for reuse. While it is present on all affected CPU models, the microcode mitigation is not needed on models that enumerate ARCH_CAPABILITIES[MDS_NO] in the cases where TSX is not supported or has been disabled with TSX_CTRL. The mitigation is activated by default on affected processors and it increases latency for RDRAND and RDSEED instructions. Among other effects this will reduce throughput from /dev/urandom. * Enable administrator to configure the mitigation off when desired using either mitigations=off or srbds=off. * Export vulnerability status via sysfs * Rename file-scoped macros to apply for non-whitelist table initializations. [ bp: Massage, - s/VULNBL_INTEL_STEPPING/VULNBL_INTEL_STEPPINGS/g, - do not read arch cap MSR a second time in tsx_fused_off() - just pass it in, - flip check in cpu_set_bug_bits() to save an indentation level, - reflow comments. jpoimboe: s/Mitigated/Mitigation/ in user-visible strings tglx: Dropped the fused off magic for now ] Signed-off-by: Mark Gross <mgross@linux.intel.com> Signed-off-by: Borislav Petkov <bp@suse.de> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Tony Luck <tony.luck@intel.com> Reviewed-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com> Reviewed-by: Josh Poimboeuf <jpoimboe@redhat.com> Tested-by: Neelima Krishnan <neelima.krishnan@intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2020-06-10 21:35:01 +02:00
..
firmware_loader	firmware: fix a double abort case with fw_load_sysfs_fallback	2020-04-17 10:48:42 +02:00
power	driver core: Remove device link creation limitation	2020-03-20 11:55:58 +01:00
regmap
test
arch_topology.c
attribute_container.c
base.h
bus.c
cacheinfo.c
class.c
component.c	component: Silence bind error on -EPROBE_DEFER	2020-05-27 17:37:33 +02:00
container.c
core.c	driver core: Fix creation of device links with PM-runtime flags	2020-03-20 11:55:58 +01:00
cpu.c	x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation	2020-06-10 21:35:01 +02:00
dd.c	driver core: Add device link flag DL_FLAG_AUTOPROBE_CONSUMER	2020-03-20 11:55:58 +01:00
devcon.c
devcoredump.c
devres.c
devtmpfs.c
driver.c
firmware.c
hypervisor.c
init.c
isa.c
Kconfig
Makefile
map.c
memory.c	mm/memory_hotplug: fix try_offline_node()	2020-01-29 16:43:27 +01:00
module.c
node.c	drivers/base/node.c: simplify unregister_memory_block_under_nodes()	2020-01-29 16:43:26 +01:00
pinctrl.c
platform-msi.c
platform.c	driver core: platform: fix u32 greater or equal to zero comparison	2020-02-24 08:34:50 +01:00
property.c
soc.c
syscore.c
topology.c
transport_class.c