Received: by 2002:a05:6358:e9c4:b0:b2:91dc:71ab with SMTP id hc4csp3081144rwb; Sat, 6 Aug 2022 12:11:48 -0700 (PDT) X-Google-Smtp-Source: AA6agR5/Y42kZaWjVFI/W5IY4XVQluX3W6NqlKUGNyWd6IfQlnapT0XiZzGwP/BwZWvLipDtv361 X-Received: by 2002:a17:90b:3c2:b0:1f3:19ea:952 with SMTP id go2-20020a17090b03c200b001f319ea0952mr13680282pjb.158.1659813108283; Sat, 06 Aug 2022 12:11:48 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1659813108; cv=none; d=google.com; s=arc-20160816; b=dJe4IauQ/gJ55lP9TRLNHbXSyy1NxE8DleQ/1x3haUK//Gn6FjQg6AVT7TpjOJKnjq I9iE7fCVVRoaVfzVyQGiduFaF3Bv9+ij/G2p++CHp6ldujeorsbZg7Z9Gd6gJ6mauiL4 iFgYBevuNBxZNxjE1sStRSIdqskFo0mwI4AAoKtHeK3euoZDFvRHgJ4z25iDfoTWJMoe LbKtBnOSxCZtwNBGZnRSekQccxeByBSMOGF3Lwqn5LRmp6OENYKpl1ZSp7NYb3Hful9J Xb1ASf/U0BH5yikFZM2Ed0ueVSZVRIWAVBhNYjZv9hk9gstI57zADiV0Y96Km5ODtUow K53Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:sender:dkim-signature; bh=b1/dM4HS7a7aBwHPuKKyvIe9nueiJMG06ztCYduLU7Q=; b=FyREq2y1r0bZCsNKjpUFEw3ux5deIE4lEfeWlCBvh5itxyYuPr+soVQmvSEpzrvFLF ZH37BmM06x91tppZDNr2YgAtKuzcl1iOK5w8m3MMCnqHng43Yy8F1zCYAGjVQOGS3VdT s5hozEXTJAziHWibj9c8oCXlRBKy14f8RYfLzbiPmkwDaUE4CouKMzXVa/3N0gzP2fAu xQoL+p/gc6YQgXwcTgsq+LXADXa1se5dJ7w0p9iFM628agER7ySEOcm8cnINogvd3uj4 4IrXU+QVLu+Pa2I0MA95+0PkFYR+Bua/ZMWAx1+EkD5srfebbqdecLi2lUbvth5OHewh 0MGQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20210112 header.b=iVF8V9jk; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id j3-20020a17090aeb0300b001f4e70d6bc2si2673470pjz.88.2022.08.06.12.11.32; Sat, 06 Aug 2022 12:11:48 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20210112 header.b=iVF8V9jk; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231646AbiHFTA7 (ORCPT + 99 others); Sat, 6 Aug 2022 15:00:59 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:41118 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229639AbiHFTAz (ORCPT ); Sat, 6 Aug 2022 15:00:55 -0400 Received: from mail-ej1-x635.google.com (mail-ej1-x635.google.com [IPv6:2a00:1450:4864:20::635]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id C224F1055F; Sat, 6 Aug 2022 12:00:54 -0700 (PDT) Received: by mail-ej1-x635.google.com with SMTP id w19so10136781ejc.7; Sat, 06 Aug 2022 12:00:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=sender:date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to; bh=b1/dM4HS7a7aBwHPuKKyvIe9nueiJMG06ztCYduLU7Q=; b=iVF8V9jkIU0HdsUq7ADGgunKp4UJXXkuAydwuNxdO3LzQh18BrX9DTg6aimpbfOvDY A656IAU46sJEY+x81pz22oAzbClTxqCdG+xr3XvQKpsJsaT4Wr7F9jxm5ufeLHUSo2ZK vI18kKY8GRVuxCB/9VtA8JGi7ucbCitF55QlAi+kOzLNr/6JgZZNBhuAIK2fCT4V5M5l aRP6A2rEQ2dlcP66s3PtzLN/sGvmYrUuUzYMHCVJUloyf0OF7tPYLVZoQ8PHqvSHqeqs pX+Qvo6xz4vm0QhkXMrXwymTfHD09CuFmJkQB7+w3uH2OaVaTj5pKYPQyXBGgNVFQPnc f1yg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:sender:date:from:to:cc:subject:message-id :references:mime-version:content-disposition:in-reply-to; bh=b1/dM4HS7a7aBwHPuKKyvIe9nueiJMG06ztCYduLU7Q=; b=oZbFw98SSrcZxYk1LnHvY8AtxUykpws0aZWaQOYjACeIHsdRnuGP8Z7o0vYF0gfuAw e4mu3ai7ZvX5//9uWdoTw+o7TBVl81kZdsWA3JQnSkHLLnjKJ/KJDX8ghTsz7OPPzKpu uRidjrOhGn5T952ykJnRKEqMtSKfMvkmcUj+k12Ib3qHegCIGnph3XNLRCcEkWJ0rFi7 qNg6UAVfSNUzagP+ApbV1zOWHt6Cro50+URUsJz4AgbddE7t29DIGwJ9MbnV/ASCugCZ 1PiA7VgjnYmcpuLHffQtVkMT2nDomnhxLwXTvcNdhti7flzxwPPyzrlNipFTrJgGG1B1 Slcg== X-Gm-Message-State: ACgBeo1/GHrVy/vZnlxhoki+UW4Wpuv1RnYhk1djsxUzwcUOjG4pDsw3 1cGlpv90ABaep91J95K+Hvk= X-Received: by 2002:a17:907:75e7:b0:730:9711:ad80 with SMTP id jz7-20020a17090775e700b007309711ad80mr8826974ejc.35.1659812453249; Sat, 06 Aug 2022 12:00:53 -0700 (PDT) Received: from gmail.com (195-38-112-141.pool.digikabel.hu. [195.38.112.141]) by smtp.gmail.com with ESMTPSA id l2-20020a1709061c4200b00730538b7cf1sm2984909ejg.75.2022.08.06.12.00.52 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 06 Aug 2022 12:00:52 -0700 (PDT) Sender: Ingo Molnar Date: Sat, 6 Aug 2022 21:00:50 +0200 From: Ingo Molnar To: Kim Phillips Cc: bp@alien8.de, x86@kernel.org, peterz@infradead.org, bp@suse.de, bpf@vger.kernel.org, jpoimboe@redhat.com, andrew.cooper3@citrix.com, linux-kernel@vger.kernel.org, thomas.lendacky@amd.com Subject: Re: [PATCH v2] x86/bugs: Enable STIBP for IBPB mitigated RetBleed Message-ID: References: <20220805215009.498407-1-kim.phillips@amd.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20220805215009.498407-1-kim.phillips@amd.com> X-Spam-Status: No, score=-1.5 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_EF,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, FSL_HELO_FAKE,HEADER_FROM_DIFFERENT_DOMAINS,RCVD_IN_DNSWL_NONE, SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org * Kim Phillips wrote: > Speculative Code Execution with Return Instructions) > vulnerability. > > + AMD-based unret and ibpb mitigations alone do not stop > + sibling threads influencing the predictions of other sibling > + threads. For that reason, we use STIBP on processors > + that support it, and mitigate SMT on processors that don't. > * retbleed_select_mitigation(); specifically the STIBP selection is > - * forced for UNRET. > + * forced for UNRET or IBPB. Nit: could you please capitalize the acronyms & instruction names consistently? Human eyesight is case sensitive. Ie. it should be UNRET and IBPB everywhere. Thanks, Ingo