Hello,
First patch is about exposing MCDT_NO when announced by the hardware.
Second patch adds detection in Xen to expose the bit if the
family/model/stepping doesn't expose MCDT behavior.
Document about the feature can be found at:
https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/best-practices/data-operand-independent-timing-isa-guidance.html
Thanks, Roger.
Roger Pau Monne (2):
x86/cpuid: expose MCDT_NO to guests
x86/cpuid: set MCDT_NO for non-affected models
tools/libs/light/libxl_cpuid.c | 1 +
tools/misc/xen-cpuid.c | 1 +
xen/arch/x86/cpu/intel.c | 70 +++++++++++++++++++++
xen/arch/x86/cpuid.c | 10 +++
xen/include/public/arch-x86/cpufeatureset.h | 1 +
5 files changed, 83 insertions(+)
--
2.36.0