MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/3961
JIRA: https://issues.redhat.com/browse/RHEL-31226
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/3961
RFDS (Register File Data Sampling - CVE-2023-28746) is a CPU
vulnerability that may allow userspace to infer kernel stale data
previously used in floating point registers, vector registers and
integer registers. RFDS only affects certain Intel Atom processors.
Intel released a microcode update that uses VERW instruction to clear the
affected CPU buffers. Unlike MDS, none of the affected cores support SMT.
This MR backports the upstream kernel mitigation to RHEL. New microcode
is also needed to complete the mitigation.
Signed-off-by: Waiman Long <longman@redhat.com>
Approved-by: Steve Best <sbest@redhat.com>
Approved-by: Chris von Recklinghausen <crecklin@redhat.com>
Approved-by: Rafael Aquini <aquini@redhat.com>
Approved-by: Josh Poimboeuf <jpoimboe@redhat.com>
Approved-by: David Arcari <darcari@redhat.com>
Approved-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
Merged-by: Lucas Zampieri <lzampier@redhat.com>
c644b7e89c