linux-loongson/Documentation/admin-guide/hw-vuln
David Kaplan 4fa7d880ae x86/bugs: Select best SRSO mitigation
The SRSO bug can theoretically be used to conduct user->user or guest->guest
attacks and requires a mitigation (namely IBPB instead of SBPB on context
switch) for these.  So mark SRSO as being applicable to the user->user and
guest->guest attack vectors.

Additionally, SRSO supports multiple mitigations which mitigate different
potential attack vectors.  Some CPUs are also immune to SRSO from
certain attack vectors (like user->kernel).

Use the specific attack vectors requiring mitigation to select the best
SRSO mitigation to avoid unnecessary performance hits.

Signed-off-by: David Kaplan <david.kaplan@amd.com>
Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Reviewed-by: Borislav Petkov (AMD) <bp@alien8.de>
Link: https://lore.kernel.org/20250721160310.1804203-1-david.kaplan@amd.com
2025-08-11 17:32:36 +02:00
..
attack_vector_controls.rst x86/bugs: Select best SRSO mitigation 2025-08-11 17:32:36 +02:00
core-scheduling.rst admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET 2024-04-24 13:04:27 -06:00
cross-thread-rsb.rst Documentation/hw-vuln: Fix rST warning 2023-02-15 07:24:23 -05:00
gather_data_sampling.rst Documentation/x86: Fix backwards on/off logic about YMM support 2023-08-01 15:28:24 -07:00
index.rst Documentation/x86: Document new attack vector controls 2025-07-11 17:51:43 +02:00
indirect-target-selection.rst Documentation: x86/bugs/its: Add ITS documentation 2025-05-09 13:22:04 -07:00
l1d_flush.rst Documentation: Add L1D flushing Documentation 2021-07-28 11:42:25 +02:00
l1tf.rst docs: add IRQ documentation at the core-api book 2020-05-15 12:00:56 -06:00
mds.rst docs/hw-vuln: Update desc of best effort mode 2023-10-10 13:35:55 -06:00
multihit.rst x86/bugs/multihit: Fix mitigation reporting when VMX is not in use 2020-08-07 01:32:00 +02:00
old_microcode.rst x86/cpu: Help users notice when running old Intel microcode 2025-04-22 08:33:52 +02:00
processor_mmio_stale_data.rst x86/bugs: Rename MDS machinery to something more generic 2025-06-16 18:45:18 +02:00
reg-file-data-sampling.rst x86/rfds: Exclude P-only parts from the RFDS affected list 2025-03-19 11:17:23 +01:00
rsb.rst x86/bugs: Add RSB mitigation document 2025-04-09 12:42:09 +02:00
special-register-buffer-data-sampling.rst docs: admin-guide: hw-vuln: avoid using ReST :doc:foo markup 2021-06-17 13:24:36 -06:00
spectre.rst x86/bugs: Remove duplicate Spectre cmdline option descriptions 2024-06-28 15:28:38 +02:00
srso.rst x86/bugs: KVM: Add support for SRSO_MSR_FIX 2025-02-26 15:13:06 +01:00
tsx_async_abort.rst docs/hw-vuln: Update desc of best effort mode 2023-10-10 13:35:55 -06:00