x86/bugs: Add missing NO_SSB flag
PATCH v2 1/1 x86/bugs: Add missing NO_SSB flag
The Moorefield and Lightning Mountain Atom processors are missing the NO_SSB flag in the vulnerabilities whitelist. This will cause unaffected parts to incorrectly be reported as vulnerable. Add the missing flag.
These parts are currently out of service and were verified internally with archived documentation that they need the NO_SSB flag.
---V1->V2
Added Reported-by and Closes tags Added note re: missing public documentation
arch/x86/kernel/cpu/common.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)
arch/x86/kernel/cpu/common.c +2 -2
@@ -1165,8 +1165,8 @@ static const __initconst struct x86_cpu_id cpu_vuln_whitelist[] = {VULNWL_INTEL (INTEL_CORE_YONAH ,NO_SSB ), -VULNWL_INTEL (INTEL_ATOM_AIRMONT_MID ,NO_L1TF |MSBDS_ONLY |NO_SWAPGS |NO_ITLB_MULTIHIT ), -VULNWL_INTEL (INTEL_ATOM_AIRMONT_NP ,NO_L1TF |NO_SWAPGS |NO_ITLB_MULTIHIT ), +VULNWL_INTEL (INTEL_ATOM_AIRMONT_MID ,NO_SSB |NO_L1TF |NO_SWAPGS |NO_ITLB_MULTIHIT |MSBDS_ONLY ), +VULNWL_INTEL (INTEL_ATOM_AIRMONT_NP ,NO_SSB |NO_L1TF |NO_SWAPGS |NO_ITLB_MULTIHIT ),VULNWL_INTEL (INTEL_ATOM_GOLDMONT ,NO_MDS |NO_L1TF |NO_SWAPGS |NO_ITLB_MULTIHIT |NO_MMIO ), VULNWL_INTEL(INTEL_ATOM_GOLDMONT_D, NO_MDS | NO_L1TF | NO_SWAPGS | NO_ITLB_MULTIHIT | NO_MMIO),
Signature · 1 line
2.25.1
The following commit has been merged into the x86/bugs branch of tip:
The following commit has been merged into the x86/bugs branch of tip:
Commit-ID: 23e12b54acf621f4f03381dca91cc5f1334f21fd Gitweb: https://git.kernel.org/tip/23e12b54acf621f4f03381dca91cc5f1334f21fd Author: Daniel Sneddon <[email protected]> AuthorDate: Thu, 29 Aug 2024 12:24:37 -07:00 Committer: Borislav Petkov (AMD) <[email protected]> CommitterDate: Thu, 05 Sep 2024 10:29:31 +02:00
x86/bugs: Add missing NO_SSB flag
The Moorefield and Lightning Mountain Atom processors are missing the NO_SSB flag in the vulnerabilities whitelist. This will cause unaffected parts to incorrectly be reported as vulnerable. Add the missing flag.
These parts are currently out of service and were verified internally with archived documentation that they need the NO_SSB flag.
--- arch/x86/kernel/cpu/common.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)
arch/x86/kernel/cpu/common.c +2 -2
@@ -1165,8 +1165,8 @@ static const __initconst struct x86_cpu_id cpu_vuln_whitelist[] = {VULNWL_INTEL (INTEL_CORE_YONAH ,NO_SSB ), -VULNWL_INTEL (INTEL_ATOM_AIRMONT_MID ,NO_L1TF |MSBDS_ONLY |NO_SWAPGS |NO_ITLB_MULTIHIT ), -VULNWL_INTEL (INTEL_ATOM_AIRMONT_NP ,NO_L1TF |NO_SWAPGS |NO_ITLB_MULTIHIT ), +VULNWL_INTEL (INTEL_ATOM_AIRMONT_MID ,NO_SSB |NO_L1TF |NO_SWAPGS |NO_ITLB_MULTIHIT |MSBDS_ONLY ), +VULNWL_INTEL (INTEL_ATOM_AIRMONT_NP ,NO_SSB |NO_L1TF |NO_SWAPGS |NO_ITLB_MULTIHIT ),VULNWL_INTEL (INTEL_ATOM_GOLDMONT ,NO_MDS |NO_L1TF |NO_SWAPGS |NO_ITLB_MULTIHIT |NO_MMIO ), VULNWL_INTEL(INTEL_ATOM_GOLDMONT_D, NO_MDS | NO_L1TF | NO_SWAPGS | NO_ITLB_MULTIHIT | NO_MMIO),