Borislav Petkov a863a7
From: Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
Borislav Petkov a863a7
Date: Thu, 19 May 2022 20:28:10 -0700
Borislav Petkov a863a7
Subject: x86/speculation: Add a common function for MD_CLEAR mitigation update
Borislav Petkov a863a7
Git-commit: f52ea6c26953fed339aa4eae717ee5c2133c7ff2
Borislav Petkov a863a7
Git-repo: git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git
Borislav Petkov a863a7
Patch-mainline: Queued in tip for v5.19
Borislav Petkov a863a7
References: bsc#1199650 CVE-2022-21166 CVE-2022-21127 CVE-2022-21123 CVE-2022-21125 CVE-2022-21180
Borislav Petkov a863a7
Borislav Petkov a863a7
Processor MMIO Stale Data mitigation uses similar mitigation as MDS and
Borislav Petkov a863a7
TAA. In preparation for adding its mitigation, add a common function to
Borislav Petkov a863a7
update all mitigations that depend on MD_CLEAR.
Borislav Petkov a863a7
Borislav Petkov a863a7
  [ bp: Add a newline in md_clear_update_mitigation() to separate
Borislav Petkov a863a7
    statements better. ]
Borislav Petkov a863a7
Borislav Petkov a863a7
Signed-off-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
Borislav Petkov a863a7
Signed-off-by: Borislav Petkov <bp@suse.de>
Borislav Petkov a863a7
---
Borislav Petkov a863a7
 arch/x86/kernel/cpu/bugs.c |   59 +++++++++++++++++++++++++--------------------
Borislav Petkov a863a7
 1 file changed, 33 insertions(+), 26 deletions(-)
Borislav Petkov a863a7
Borislav Petkov a863a7
--- a/arch/x86/kernel/cpu/bugs.c
Borislav Petkov a863a7
+++ b/arch/x86/kernel/cpu/bugs.c
Borislav Petkov a863a7
@@ -41,7 +41,7 @@ static void __init spectre_v2_select_mit
Borislav Petkov a863a7
 static void __init ssb_select_mitigation(void);
Borislav Petkov a863a7
 static void __init l1tf_select_mitigation(void);
Borislav Petkov a863a7
 static void __init mds_select_mitigation(void);
Borislav Petkov a863a7
-static void __init mds_print_mitigation(void);
Borislav Petkov a863a7
+static void __init md_clear_update_mitigation(void);
Borislav Petkov a863a7
 static void __init taa_select_mitigation(void);
Borislav Petkov a863a7
 static void __init srbds_select_mitigation(void);
Borislav Petkov a863a7
 
Borislav Petkov a863a7
@@ -114,10 +114,10 @@ void __init check_bugs(void)
Borislav Petkov a863a7
 	srbds_select_mitigation();
Borislav Petkov a863a7
 
Borislav Petkov a863a7
 	/*
Borislav Petkov a863a7
-	 * As MDS and TAA mitigations are inter-related, print MDS
Borislav Petkov a863a7
-	 * mitigation until after TAA mitigation selection is done.
Borislav Petkov a863a7
+	 * As MDS and TAA mitigations are inter-related, update and print their
Borislav Petkov a863a7
+	 * mitigation after TAA mitigation selection is done.
Borislav Petkov a863a7
 	 */
Borislav Petkov a863a7
-	mds_print_mitigation();
Borislav Petkov a863a7
+	md_clear_update_mitigation();
Borislav Petkov a863a7
 
Borislav Petkov a863a7
 	arch_smt_update();
Borislav Petkov a863a7
 
Borislav Petkov a863a7
@@ -258,14 +258,6 @@ static void __init mds_select_mitigation
Borislav Petkov a863a7
 	}
Borislav Petkov a863a7
 }
Borislav Petkov a863a7
 
Borislav Petkov a863a7
-static void __init mds_print_mitigation(void)
Borislav Petkov a863a7
-{
Borislav Petkov a863a7
-	if (!boot_cpu_has_bug(X86_BUG_MDS) || cpu_mitigations_off())
Borislav Petkov a863a7
-		return;
Borislav Petkov a863a7
-
Borislav Petkov a863a7
-	pr_info("%s\n", mds_strings[mds_mitigation]);
Borislav Petkov a863a7
-}
Borislav Petkov a863a7
-
Borislav Petkov a863a7
 static int __init mds_cmdline(char *str)
Borislav Petkov a863a7
 {
Borislav Petkov a863a7
 	if (!boot_cpu_has_bug(X86_BUG_MDS))
Borislav Petkov a863a7
@@ -313,7 +305,7 @@ static void __init taa_select_mitigation
Borislav Petkov a863a7
 	/* TSX previously disabled by tsx=off */
Borislav Petkov a863a7
 	if (!boot_cpu_has(X86_FEATURE_RTM)) {
Borislav Petkov a863a7
 		taa_mitigation = TAA_MITIGATION_TSX_DISABLED;
Borislav Petkov a863a7
-		goto out;
Borislav Petkov a863a7
+		return;
Borislav Petkov a863a7
 	}
Borislav Petkov a863a7
 
Borislav Petkov a863a7
 	if (cpu_mitigations_off()) {
Borislav Petkov a863a7
@@ -327,7 +319,7 @@ static void __init taa_select_mitigation
Borislav Petkov a863a7
 	 */
Borislav Petkov a863a7
 	if (taa_mitigation == TAA_MITIGATION_OFF &&
Borislav Petkov a863a7
 	    mds_mitigation == MDS_MITIGATION_OFF)
Borislav Petkov a863a7
-		goto out;
Borislav Petkov a863a7
+		return;
Borislav Petkov a863a7
 
Borislav Petkov a863a7
 	if (boot_cpu_has(X86_FEATURE_MD_CLEAR))
Borislav Petkov a863a7
 		taa_mitigation = TAA_MITIGATION_VERW;
Borislav Petkov a863a7
@@ -359,18 +351,6 @@ static void __init taa_select_mitigation
Borislav Petkov a863a7
 
Borislav Petkov a863a7
 	if (taa_nosmt || cpu_mitigations_auto_nosmt())
Borislav Petkov a863a7
 		cpu_smt_disable(false);
Borislav Petkov a863a7
-
Borislav Petkov a863a7
-	/*
Borislav Petkov a863a7
-	 * Update MDS mitigation, if necessary, as the mds_user_clear is
Borislav Petkov a863a7
-	 * now enabled for TAA mitigation.
Borislav Petkov a863a7
-	 */
Borislav Petkov a863a7
-	if (mds_mitigation == MDS_MITIGATION_OFF &&
Borislav Petkov a863a7
-	    boot_cpu_has_bug(X86_BUG_MDS)) {
Borislav Petkov a863a7
-		mds_mitigation = MDS_MITIGATION_FULL;
Borislav Petkov a863a7
-		mds_select_mitigation();
Borislav Petkov a863a7
-	}
Borislav Petkov a863a7
-out:
Borislav Petkov a863a7
-	pr_info("%s\n", taa_strings[taa_mitigation]);
Borislav Petkov a863a7
 }
Borislav Petkov a863a7
 
Borislav Petkov a863a7
 static int __init tsx_async_abort_parse_cmdline(char *str)
Borislav Petkov a863a7
@@ -395,6 +375,33 @@ static int __init tsx_async_abort_parse_
Borislav Petkov a863a7
 early_param("tsx_async_abort", tsx_async_abort_parse_cmdline);
Borislav Petkov a863a7
 
Borislav Petkov a863a7
 #undef pr_fmt
Borislav Petkov a863a7
+#define pr_fmt(fmt)     "" fmt
Borislav Petkov a863a7
+
Borislav Petkov a863a7
+static void __init md_clear_update_mitigation(void)
Borislav Petkov a863a7
+{
Borislav Petkov a863a7
+	if (cpu_mitigations_off())
Borislav Petkov a863a7
+		return;
Borislav Petkov a863a7
+
Borislav Petkov a863a7
+	if (!static_key_enabled(&mds_user_clear))
Borislav Petkov a863a7
+		goto out;
Borislav Petkov a863a7
+
Borislav Petkov a863a7
+	/*
Borislav Petkov a863a7
+	 * mds_user_clear is now enabled. Update MDS mitigation, if
Borislav Petkov a863a7
+	 * necessary.
Borislav Petkov a863a7
+	 */
Borislav Petkov a863a7
+	if (mds_mitigation == MDS_MITIGATION_OFF &&
Borislav Petkov a863a7
+	    boot_cpu_has_bug(X86_BUG_MDS)) {
Borislav Petkov a863a7
+		mds_mitigation = MDS_MITIGATION_FULL;
Borislav Petkov a863a7
+		mds_select_mitigation();
Borislav Petkov a863a7
+	}
Borislav Petkov a863a7
+out:
Borislav Petkov a863a7
+	if (boot_cpu_has_bug(X86_BUG_MDS))
Borislav Petkov a863a7
+		pr_info("MDS: %s\n", mds_strings[mds_mitigation]);
Borislav Petkov a863a7
+	if (boot_cpu_has_bug(X86_BUG_TAA))
Borislav Petkov a863a7
+		pr_info("TAA: %s\n", taa_strings[taa_mitigation]);
Borislav Petkov a863a7
+}
Borislav Petkov a863a7
+
Borislav Petkov a863a7
+#undef pr_fmt
Borislav Petkov a863a7
 #define pr_fmt(fmt)	"SRBDS: " fmt
Borislav Petkov a863a7
 
Borislav Petkov a863a7
 enum srbds_mitigations {