]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Provide further mitigation against CVE-2017-5715 by flushing the
authorTycho Nightingale <tychon@FreeBSD.org>
Mon, 12 Feb 2018 14:45:27 +0000 (14:45 +0000)
committerTycho Nightingale <tychon@FreeBSD.org>
Mon, 12 Feb 2018 14:45:27 +0000 (14:45 +0000)
commit58a6aaf7ec41aa4ea4f3d8d752a8f03f4432bc25
tree96ebe5d8632e7622ea8c34222d5477f70a7d08a1
parent590682b6e6b2b86fc0bc8c9507444e4392c6efd2
Provide further mitigation against CVE-2017-5715 by flushing the
return stack buffer (RSB) upon returning from the guest.

This was inspired by this linux commit:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/arch/x86/kvm?id=117cc7a908c83697b0b737d15ae1eb5943afe35b

Reviewed by: grehan
Sponsored by: Dell EMC Isilon
Differential Revision: https://reviews.freebsd.org/D14272
sys/amd64/vmm/amd/svm_support.S
sys/amd64/vmm/intel/vmcs.c
sys/amd64/vmm/intel/vmx.h
sys/amd64/vmm/intel/vmx_support.S