linux

iv/linux

History

Pawan Gupta 400331f8ff x86/tsx: Disable TSX development mode at boot

A microcode update on some Intel processors causes all TSX transactions
to always abort by default[*]. Microcode also added functionality to
re-enable TSX for development purposes. With this microcode loaded, if
tsx=on was passed on the cmdline, and TSX development mode was already
enabled before the kernel boot, it may make the system vulnerable to TSX
Asynchronous Abort (TAA).

To be on safer side, unconditionally disable TSX development mode during
boot. If a viable use case appears, this can be revisited later.

  [*]: Intel TSX Disable Update for Selected Processors, doc ID: 643557

  [ bp: Drop unstable web link, massage heavily. ]

Suggested-by: Andrew Cooper <andrew.cooper3@citrix.com>
Suggested-by: Borislav Petkov <bp@alien8.de>
Signed-off-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
Signed-off-by: Borislav Petkov <bp@suse.de>
Tested-by: Neelima Krishnan <neelima.krishnan@intel.com>
Cc: <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/347bd844da3a333a9793c6687d4e4eb3b2419a3e.1646943780.git.pawan.kumar.gupta@linux.intel.com

2022-04-11 09:58:40 +02:00

alpha/include

tools headers uapi: Sync asm-generic/mman-common.h and linux/mman.h

2019-03-28 14:31:56 -03:00

arc/include/uapi/asm

tools arch uapi: Copy missing unistd.h headers for arc, hexagon and riscv

2019-05-02 16:00:20 -04:00

arm/include

tools headers kvm: Sync kvm headers with the kernel sources

2019-12-02 12:54:13 -03:00

arm64/include

tools headers arm64: Sync arm64's cputype.h with the kernel sources