Kim Phillips ff5305ec8c x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled ... commit fd470a8bee upstream. Unlike Intel's Enhanced IBRS feature, AMD's Automatic IBRS does not provide protection to processes running at CPL3/user mode, see section "Extended Feature Enable Register (EFER)" in the APM v2 at https://bugzilla.kernel.org/attachment.cgi?id=304652 Explicitly enable STIBP to protect against cross-thread CPL3 branch target injections on systems with Automatic IBRS enabled. Also update the relevant documentation. Fixes: e7862eda30 ("x86/cpu: Support AMD Automatic IBRS") Reported-by: Tom Lendacky <thomas.lendacky@amd.com> Signed-off-by: Kim Phillips <kim.phillips@amd.com> Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de> Cc: stable@vger.kernel.org Link: https://lore.kernel.org/r/20230720194727.67022-1-kim.phillips@amd.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-04-10 16:19:34 +02:00
..
ABI	x86/rfds: Mitigate Register File Data Sampling (RFDS)	2024-04-10 16:18:48 +02:00
accounting	sched/psi: report zeroes for CPU full at the system level	2022-06-09 10:22:48 +02:00
admin-guide	x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled	2024-04-10 16:19:34 +02:00
arm
arm64	arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata	2024-02-23 08:55:14 +01:00
block
bpf
cdrom
core-api	dma-mapping: add dma_opt_mapping_size()	2024-04-10 16:18:47 +02:00
cpu-freq
crypto
dev-tools	docs/scripts/gdb: add necessary make scripts_gdb step	2023-03-10 09:39:53 +01:00
devicetree	dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp	2024-01-05 15:13:34 +01:00
doc-guide
driver-api	counter: fix docum. build problems after filename change	2023-04-20 12:13:57 +02:00
fault-injection	debugfs: fix error when writing negative value to atomic_t debugfs file	2022-12-31 13:14:03 +01:00
fb
features
filesystems	lockd: introduce safe async lock op	2024-04-10 16:19:29 +02:00
firmware-guide	Documentation: ACPI: EINJ: Fix obsolete example	2022-08-25 11:40:01 +02:00
firmware_class
fpga
gpu	drm/i915/display: Move DRRS code its own file	2022-03-08 19:12:40 +01:00
hid
hwmon	hwmon: (ftsteutates) Fix scaling of measurements	2023-03-10 09:39:21 +01:00
i2c
ia64
ide
iio
infiniband
input	Input: iforce - add support for Boeder Force Feedback Wheel	2022-09-20 12:39:45 +02:00
isdn
kbuild
kernel-hacking	docs: futex: Fix kernel-doc references after code split-up preparation	2023-04-26 13:51:53 +02:00
leds
litmus-tests
livepatch
locking	Documentation/locking/locktypes: Update migrate_disable() bits.	2021-12-14 10:57:18 +01:00
m68k
maintainer
mhi
mips
misc-devices
netlabel
networking	net: change accept_ra_min_rtr_lft to affect all RA lifetimes	2023-10-19 23:05:35 +02:00
nios2
nvdimm
openrisc
parisc
PCI
pcmcia
power
powerpc
process	docs/process/howto: Replace C89 with C11	2023-12-13 18:36:46 +01:00
RCU
riscv	riscv: Move early dtb mapping into the fixmap region	2023-05-01 08:23:24 +09:00
s390
scheduler
scsi	scsi: core: Fix the scsi_set_resid() documentation	2023-09-19 12:22:50 +02:00
security	KEYS: trusted: allow use of kernel RNG for key material	2023-10-19 23:05:33 +02:00
sh
sound	ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument	2024-02-23 08:54:46 +01:00
sparc
sphinx	docs: Fix the docs build with Sphinx 6.0	2023-01-18 11:48:48 +01:00
sphinx-static
spi
staging
target
timers
trace	tracing/probes: Add symstr type for dynamic events	2023-08-03 10:22:30 +02:00
translations	docs/process/howto: Replace C89 with C11	2023-12-13 18:36:46 +01:00
tty/device_drivers	serial: 8250: Add proper clock handling for OxSemi PCIe devices	2022-08-17 14:24:23 +02:00
usb
userspace-api	Remove DECnet support from kernel	2023-06-21 15:59:15 +02:00
virt	KVM: s390: disable migration mode when dirty tracking is disabled	2023-03-10 09:40:01 +01:00
vm
w1
watchdog
x86	x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key	2024-04-10 16:18:48 +02:00
xtensa
.gitignore
arch.rst
asm-annotations.rst
atomic_bitops.txt	locking/atomic: Make test_and_*_bit() ordered on failure	2022-08-25 11:39:54 +02:00
atomic_t.txt
Changes
CodingStyle
conf.py	docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0	2022-06-09 10:23:30 +02:00
COPYING-logo
docutils.conf
dontdiff
index.rst
Kconfig
logo.gif
Makefile
memory-barriers.txt
SubmittingPatches
watch_queue.rst