RE: [PATCH v5 00/20] Attack vector controls (part 2)

[Kaplan, David]

[AMD Official Use Only - AMD Internal Distribution Only]

> -----Original Message-----
> From: Borislav Petkov <bp@xxxxxxxxx>
> Sent: Monday, June 30, 2025 11:40 AM
> To: Kaplan, David <David.Kaplan@xxxxxxx>
> Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>; Peter Zijlstra <peterz@xxxxxxxxxxxxx>;
> Josh Poimboeuf <jpoimboe@xxxxxxxxxx>; Pawan Gupta
> <pawan.kumar.gupta@xxxxxxxxxxxxxxx>; Ingo Molnar <mingo@xxxxxxxxxx>; Dave
> Hansen <dave.hansen@xxxxxxxxxxxxxxx>; x86@xxxxxxxxxx; H . Peter Anvin
> <hpa@xxxxxxxxx>; linux-kernel@xxxxxxxxxxxxxxx
> Subject: Re: [PATCH v5 00/20] Attack vector controls (part 2)
>
> Caution: This message originated from an External Source. Use proper caution
> when opening attachments, clicking links, or responding.
>
>
> On Fri, May 09, 2025 at 11:28:19AM -0500, David Kaplan wrote:
> >  .../hw-vuln/attack_vector_controls.rst        | 236 +++++++++++++++
> >  Documentation/admin-guide/hw-vuln/index.rst   |   1 +
> >  .../admin-guide/kernel-parameters.txt         |   4 +
> >  arch/Kconfig                                  |   3 +
> >  arch/x86/Kconfig                              |   1 +
> >  arch/x86/kernel/cpu/bugs.c                    | 278 ++++++++++++++----
> >  arch/x86/mm/pti.c                             |   4 +-
> >  drivers/base/cpu.c                            |  67 +++++
> >  include/linux/cpu.h                           |  21 ++
> >  kernel/cpu.c                                  | 130 +++++++-
> >  10 files changed, 672 insertions(+), 73 deletions(-)
> >  create mode 100644 Documentation/admin-guide/hw-
> vuln/attack_vector_controls.rst
>
> Ok, I replied to one message which is needs more discussing but the rest looks
> ok to me. Feel free to send the next revision once we've resolved this so that
> I can queue it.
>
> Thx.
>

Ack, thanks.  Note that the next revision will also include a new patch for adding attack vector support for ITS, but that should be pretty straightforward.

--David Kaplan