mbox series

[SRU,Bionic,Cosmic,0/1] KVM: PPC: Book3S HV: Provide mode where all vCPUs on a core must be the same VM

Message ID cover.1539288711.git.joseph.salisbury@canonical.com
Headers show
Series KVM: PPC: Book3S HV: Provide mode where all vCPUs on a core must be the same VM | expand

Message

Joseph Salisbury Oct. 11, 2018, 8:19 p.m. UTC
BugLink: https://bugs.launchpad.net/bugs/1792957

== SRU Justification ==
This patch has been requested by IBM.  It provides a mode where all vCPUs 
on a core must be the same VM.  This is intended for use in 
security-conscious settings where users are concerned about possible 
side-channel attacks between threads which could perhaps enable one VM 
to attack another VM on the same core, or the host.

== Fix ==
linux-next commit:
aa2278644ae5 ("KVM: PPC: Book3S HV: Provide mode where all vCPUs on a core must be the same VM")


== Regression Potential ==
Low.  Changes limited to powerpc.

== Test Case ==
A test kernel was built with this patch and tested by the original bug reporter.
The bug reporter states the test kernel resolved the bug.



Paul Mackerras (1):
  KVM: PPC: Book3S HV: Provide mode where all vCPUs on a core must be
    the same VM

 arch/powerpc/kvm/book3s_hv.c | 8 ++++++++
 1 file changed, 8 insertions(+)

Comments

Seth Forshee Oct. 15, 2018, 3:48 p.m. UTC | #1
On Thu, Oct 11, 2018 at 04:19:18PM -0400, Joseph Salisbury wrote:
> BugLink: https://bugs.launchpad.net/bugs/1792957
> 
> == SRU Justification ==
> This patch has been requested by IBM.  It provides a mode where all vCPUs 
> on a core must be the same VM.  This is intended for use in 
> security-conscious settings where users are concerned about possible 
> side-channel attacks between threads which could perhaps enable one VM 
> to attack another VM on the same core, or the host.
> 
> == Fix ==
> linux-next commit:
> aa2278644ae5 ("KVM: PPC: Book3S HV: Provide mode where all vCPUs on a core must be the same VM")
> 
> 
> == Regression Potential ==
> Low.  Changes limited to powerpc.
> 
> == Test Case ==
> A test kernel was built with this patch and tested by the original bug reporter.
> The bug reporter states the test kernel resolved the bug.

Applied to unstable/master, thanks!
Khalid Elmously Oct. 22, 2018, 7:26 a.m. UTC | #2
On 2018-10-11 16:19:18 , Joseph Salisbury wrote:
> BugLink: https://bugs.launchpad.net/bugs/1792957
> 
> == SRU Justification ==
> This patch has been requested by IBM.  It provides a mode where all vCPUs 
> on a core must be the same VM.  This is intended for use in 
> security-conscious settings where users are concerned about possible 
> side-channel attacks between threads which could perhaps enable one VM 
> to attack another VM on the same core, or the host.
> 
> == Fix ==
> linux-next commit:
> aa2278644ae5 ("KVM: PPC: Book3S HV: Provide mode where all vCPUs on a core must be the same VM")
> 
> 
> == Regression Potential ==
> Low.  Changes limited to powerpc.
> 
> == Test Case ==
> A test kernel was built with this patch and tested by the original bug reporter.
> The bug reporter states the test kernel resolved the bug.
> 
> 
> 
> Paul Mackerras (1):
>   KVM: PPC: Book3S HV: Provide mode where all vCPUs on a core must be
>     the same VM
> 
>  arch/powerpc/kvm/book3s_hv.c | 8 ++++++++
>  1 file changed, 8 insertions(+)
> 
> -- 
> 2.7.4
> 
> 
> -- 
> kernel-team mailing list
> kernel-team@lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team