Kim Phillips ff5305ec8c x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled ... commit fd470a8bee upstream. Unlike Intel's Enhanced IBRS feature, AMD's Automatic IBRS does not provide protection to processes running at CPL3/user mode, see section "Extended Feature Enable Register (EFER)" in the APM v2 at https://bugzilla.kernel.org/attachment.cgi?id=304652 Explicitly enable STIBP to protect against cross-thread CPL3 branch target injections on systems with Automatic IBRS enabled. Also update the relevant documentation. Fixes: e7862eda30 ("x86/cpu: Support AMD Automatic IBRS") Reported-by: Tom Lendacky <thomas.lendacky@amd.com> Signed-off-by: Kim Phillips <kim.phillips@amd.com> Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de> Cc: stable@vger.kernel.org Link: https://lore.kernel.org/r/20230720194727.67022-1-kim.phillips@amd.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-04-10 16:19:34 +02:00
..
ABI	x86/rfds: Mitigate Register File Data Sampling (RFDS)	2024-04-10 16:18:48 +02:00
accounting	sched/psi: report zeroes for CPU full at the system level	2022-06-09 10:22:48 +02:00
admin-guide	x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled	2024-04-10 16:19:34 +02:00
arm	Documentation: arm: marvell: Add 88F6825 model into list	2021-08-24 13:26:32 -06:00
arm64	arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata	2024-02-23 08:55:14 +01:00
block	Documentation: block: blk-mq: Fix small typo in multi-queue docs	2021-08-24 13:30:00 -06:00
bpf	libbpf: Rename libbpf documentation index file	2021-08-18 08:45:25 -07:00
cdrom
core-api	dma-mapping: add dma_opt_mapping_size()	2024-04-10 16:18:47 +02:00
cpu-freq	cpufreq: Remove ready() callback	2021-09-02 18:04:17 +02:00
crypto
dev-tools	docs/scripts/gdb: add necessary make scripts_gdb step	2023-03-10 09:39:53 +01:00
devicetree	dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp	2024-01-05 15:13:34 +01:00
doc-guide
driver-api	counter: fix docum. build problems after filename change	2023-04-20 12:13:57 +02:00
fault-injection	debugfs: fix error when writing negative value to atomic_t debugfs file	2022-12-31 13:14:03 +01:00
fb
features	RISC-V Patches for the 5.15 Merge Window, Part 2	2021-09-11 14:29:42 -07:00
filesystems	lockd: introduce safe async lock op	2024-04-10 16:19:29 +02:00
firmware-guide	Documentation: ACPI: EINJ: Fix obsolete example	2022-08-25 11:40:01 +02:00
firmware_class
fpga	fpga: fix spelling mistakes	2021-07-21 19:54:21 -07:00
gpu	drm/i915/display: Move DRRS code its own file	2022-03-08 19:12:40 +01:00
hid
hwmon	hwmon: (ftsteutates) Fix scaling of measurements	2023-03-10 09:39:21 +01:00
i2c	Documentation: i2c: add i2c-sysfs into index	2021-08-10 22:58:32 +02:00
ia64
ide
iio
infiniband
input	Input: iforce - add support for Boeder Force Feedback Wheel	2022-09-20 12:39:45 +02:00
isdn
kbuild	Merge branch 'akpm' (patches from Andrew)	2021-09-08 12:55:35 -07:00
kernel-hacking	docs: futex: Fix kernel-doc references after code split-up preparation	2023-04-26 13:51:53 +02:00
leds	Documentation: leds: standartizing LED names	2021-08-20 10:26:24 +02:00
litmus-tests
livepatch
locking	Documentation/locking/locktypes: Update migrate_disable() bits.	2021-12-14 10:57:18 +01:00
m68k
maintainer
mhi
mips
misc-devices
netlabel
networking	net: change accept_ra_min_rtr_lft to affect all RA lifetimes	2023-10-19 23:05:35 +02:00
nios2
nvdimm
openrisc
parisc
PCI	pci-v5.15-changes	2021-09-07 19:13:42 -07:00
pcmcia
power	Documentation: power: include kernel-doc in Energy Model doc	2021-09-07 21:17:28 +02:00
powerpc	powerpc/doc: Fix htmldocs errors	2021-08-27 00:56:34 +10:00
process	docs/process/howto: Replace C89 with C11	2023-12-13 18:36:46 +01:00
RCU	doc: Update stallwarn.rst with recent changes	2021-07-20 13:36:33 -07:00
riscv	riscv: Move early dtb mapping into the fixmap region	2023-05-01 08:23:24 +09:00
s390	vfio/mdev: Remove CONFIG_VFIO_MDEV_DEVICE	2021-06-21 15:29:25 -06:00
scheduler	This was a reasonably active cycle for documentation; this pull includes:	2021-06-28 16:53:05 -07:00
scsi	scsi: core: Fix the scsi_set_resid() documentation	2023-09-19 12:22:50 +02:00
security	KEYS: trusted: allow use of kernel RNG for key material	2023-10-19 23:05:33 +02:00
sh
sound	ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument	2024-02-23 08:54:46 +01:00
sparc
sphinx	docs: Fix the docs build with Sphinx 6.0	2023-01-18 11:48:48 +01:00
sphinx-static
spi
staging
target
timers
trace	tracing/probes: Add symstr type for dynamic events	2023-08-03 10:22:30 +02:00
translations	docs/process/howto: Replace C89 with C11	2023-12-13 18:36:46 +01:00
tty/device_drivers	serial: 8250: Add proper clock handling for OxSemi PCIe devices	2022-08-17 14:24:23 +02:00
usb	docs: usb: fix malformed table	2021-08-05 12:31:51 +02:00
userspace-api	Remove DECnet support from kernel	2023-06-21 15:59:15 +02:00
virt	KVM: s390: disable migration mode when dirty tracking is disabled	2023-03-10 09:40:01 +01:00
vm	Merge branch 'akpm' (patches from Andrew)	2021-09-08 12:55:35 -07:00
w1
watchdog
x86	x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key	2024-04-10 16:18:48 +02:00
xtensa
.gitignore
arch.rst
asm-annotations.rst
atomic_bitops.txt	locking/atomic: Make test_and_*_bit() ordered on failure	2022-08-25 11:39:54 +02:00
atomic_t.txt	Documentation/atomic_t: Document forward progress expectations	2021-08-04 15:16:47 +02:00
Changes
CodingStyle
conf.py	docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0	2022-06-09 10:23:30 +02:00
COPYING-logo
docutils.conf
dontdiff
index.rst
Kconfig
logo.gif
Makefile
memory-barriers.txt
SubmittingPatches
watch_queue.rst