Pawan Gupta 2bf604dc49 x86/bhi: Mitigate KVM by default ... commit 95a6ccbdc7 upstream. BHI mitigation mode spectre_bhi=auto does not deploy the software mitigation by default. In a cloud environment, it is a likely scenario where userspace is trusted but the guests are not trusted. Deploying system wide mitigation in such cases is not desirable. Update the auto mode to unconditionally mitigate against malicious guests. Deploy the software sequence at VMexit in auto mode also, when hardware mitigation is not available. Unlike the force =on mode, software sequence is not deployed at syscalls in auto mode. Suggested-by: Alexandre Chartre <alexandre.chartre@oracle.com> Signed-off-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com> Signed-off-by: Daniel Sneddon <daniel.sneddon@linux.intel.com> Signed-off-by: Thomas Gleixner <tglx@linutronix.de> Reviewed-by: Alexandre Chartre <alexandre.chartre@oracle.com> Reviewed-by: Josh Poimboeuf <jpoimboe@kernel.org> Signed-off-by: Daniel Sneddon <daniel.sneddon@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-04-10 16:38:24 +02:00
..
ABI	x86/rfds: Mitigate Register File Data Sampling (RFDS)	2024-03-15 10:48:13 -04:00
accel	docs/accel: correct links to mailing list archives	2024-01-23 14:45:50 -07:00
accounting
admin-guide	x86/bhi: Mitigate KVM by default	2024-04-10 16:38:24 +02:00
arch	x86/Kconfig: Remove CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT	2024-04-03 15:32:32 +02:00
block	Documentation: block: ioprio: Update schedulers	2024-01-18 08:21:14 -07:00
bpf
cdrom
core-api
cpu-freq
crypto
dev-tools	Documentation: KUnit: Update the instructions on how to test static functions	2024-01-22 07:59:03 -07:00
devicetree	dt-bindings: arm-smmu: fix SM8[45]50 GPU SMMU if condition	2024-03-26 18:17:14 -04:00
doc-guide
driver-api	soundwire: stream: add missing const to Documentation	2024-03-26 18:17:00 -04:00
fault-injection
fb
features
filesystems	ovl: mark xwhiteouts directory with overlay.opaque='x'	2024-01-23 12:39:48 +02:00
firmware-guide
firmware_class
fpga
gpu
hid
hwmon
i2c
iio
images
infiniband
input
isdn
kbuild	docs: kconfig: Fix grammar and formatting	2024-02-15 06:55:47 +09:00
kernel-hacking
leds
litmus-tests
livepatch
locking
maintainer
mhi
misc-devices
mm
netlabel
netlink	devlink: Fix length of eswitch inline-mode	2024-03-26 18:16:57 -04:00
networking	net: move dev->state into net_device_read_txrx group	2024-03-26 18:17:35 -04:00
nvdimm
nvme
PCI
pcmcia
peci
power
process	Including fixes from bpf and netfilter.	2024-02-22 09:57:58 -08:00
RAS
RCU
rust	LoongArch changes for v6.8	2024-01-19 13:30:49 -08:00
scheduler
scsi
security
sound
sphinx	docs: translations: use attribute to store current language	2024-02-21 13:41:37 -07:00
sphinx-static
spi
staging
target
tee
timers
tools
trace	tracing updates for 6.8:	2024-01-18 14:35:29 -08:00
translations
usb	usb: gadget: ncm: Fix indentations in documentation of NCM section	2024-01-27 16:27:58 -08:00
userspace-api	media: mc: Expand MUST_CONNECT flag to always require an enabled link	2024-04-03 15:32:03 +02:00
virt	KVM GUEST_MEMFD fixes for 6.8:	2024-03-10 09:27:39 -07:00
w1
watchdog
wmi
.gitignore
atomic_bitops.txt
atomic_t.txt
Changes
CodingStyle
conf.py	docs: Restore "smart quotes" for quotes	2024-04-03 15:32:08 +02:00
docutils.conf
dontdiff
index.rst
Kconfig
Makefile	docs: Makefile: Add dependency to $(YNL_INDEX) for targets other than htmldocs	2024-04-03 15:32:13 +02:00
memory-barriers.txt
SubmittingPatches
subsystem-apis.rst