Commit 8c7261ab authored by David Kaplan's avatar David Kaplan Committed by Borislav Petkov (AMD)
Browse files

x86/bugs: Add attack vector controls for GDS 



Use attack vector controls to determine if GDS mitigation is required.

Signed-off-by: default avatarDavid Kaplan <david.kaplan@amd.com>
Signed-off-by: default avatarBorislav Petkov (AMD) <bp@alien8.de>
Link: https://lore.kernel.org/20250707183316.1349127-11-david.kaplan@amd.com
parent 71dc301c

arch/x86/kernel/cpu/bugs.c

+8 −5
Original line number Diff line number Diff line
@@ -1030,12 +1030,15 @@ static void __init gds_select_mitigation(void) 
		return;

	}



	if (cpu_mitigations_off())

		gds_mitigation = GDS_MITIGATION_OFF;

	/* Will verify below that mitigation _can_ be disabled */



	if (gds_mitigation == GDS_MITIGATION_AUTO)

	if (gds_mitigation == GDS_MITIGATION_AUTO) {

		if (should_mitigate_vuln(X86_BUG_GDS))

			gds_mitigation = GDS_MITIGATION_FULL;

		else {

			gds_mitigation = GDS_MITIGATION_OFF;

			return;

		}

	}



	/* No microcode */

	if (!(x86_arch_cap_msr & ARCH_CAP_GDS_CTRL)) {