KVM: PPC: Book3S: Provide information about hardware/firmware CVE workarounds

Browse source

This adds a new ioctl, KVM_PPC_GET_CPU_CHAR, that gives userspace
information about the underlying machine's level of vulnerability
to the recently announced vulnerabilities CVE-2017-5715,
CVE-2017-5753 and CVE-2017-5754, and whether the machine provides
instructions to assist software to work around the vulnerabilities.

The ioctl returns two u64 words describing characteristics of the
CPU and required software behaviour respectively, plus two mask
words which indicate which bits have been filled in by the kernel,
for extensibility.  The bit definitions are the same as for the
new H_GET_CPU_CHARACTERISTICS hypercall.

There is also a new capability, KVM_CAP_PPC_GET_CPU_CHAR, which
indicates whether the new ioctl is available.

Signed-off-by: Paul Mackerras <paulus@ozlabs.org>

...

This commit is contained in:

Paul Mackerras 2018-01-15 16:06:47 +11:00

parent 37b95951c5

commit 3214d01f13

4 changed files with 205 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

46

Documentation/virtual/kvm/api.txt

View file

25

arch/powerpc/include/uapi/asm/kvm.h

View file

131

arch/powerpc/kvm/powerpc.c

View file

3

include/uapi/linux/kvm.h

View file