diff options
| author | Pawan Gupta <[email protected]> | 2024-11-18 17:53:12 +0000 |
|---|---|---|
| committer | Dave Hansen <[email protected]> | 2025-05-09 20:22:05 +0000 |
| commit | 2665281a07e19550944e8354a2024635a7b2714a (patch) | |
| tree | 14068159db67f67490a6c672f96d0322f4c2576c /net/unix/af_unix.c | |
| parent | x86/its: Enable Indirect Target Selection mitigation (diff) | |
| download | kernel-2665281a07e19550944e8354a2024635a7b2714a.tar.gz kernel-2665281a07e19550944e8354a2024635a7b2714a.zip | |
x86/its: Add "vmexit" option to skip mitigation on some CPUs
Ice Lake generation CPUs are not affected by guest/host isolation part of
ITS. If a user is only concerned about KVM guests, they can now choose a
new cmdline option "vmexit" that will not deploy the ITS mitigation when
CPU is not affected by guest/host isolation. This saves the performance
overhead of ITS mitigation on Ice Lake gen CPUs.
When "vmexit" option selected, if the CPU is affected by ITS guest/host
isolation, the default ITS mitigation is deployed.
Signed-off-by: Pawan Gupta <[email protected]>
Signed-off-by: Dave Hansen <[email protected]>
Reviewed-by: Josh Poimboeuf <[email protected]>
Reviewed-by: Alexandre Chartre <[email protected]>
Diffstat (limited to 'net/unix/af_unix.c')
0 files changed, 0 insertions, 0 deletions