Commit 563a2e39 authored by Thomas Gleixner's avatar Thomas Gleixner Committed by Greg Kroah-Hartman

Documentation: Add MDS vulnerability documentation

commit 5999bbe7 upstream

Add the initial MDS vulnerability documentation.
Signed-off-by: default avatarThomas Gleixner <tglx@linutronix.de>
Reviewed-by: default avatarJon Masters <jcm@redhat.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent 39a02bd9
...@@ -497,8 +497,7 @@ Description: Information about CPU vulnerabilities ...@@ -497,8 +497,7 @@ Description: Information about CPU vulnerabilities
"Vulnerable" CPU is affected and no mitigation in effect "Vulnerable" CPU is affected and no mitigation in effect
"Mitigation: $M" CPU is affected and mitigation $M is in effect "Mitigation: $M" CPU is affected and mitigation $M is in effect
Details about the l1tf file can be found in See also: Documentation/admin-guide/hw-vuln/index.rst
Documentation/admin-guide/hw-vuln/l1tf.rst
What: /sys/devices/system/cpu/smt What: /sys/devices/system/cpu/smt
/sys/devices/system/cpu/smt/active /sys/devices/system/cpu/smt/active
......
...@@ -10,3 +10,4 @@ are configurable at compile, boot or run time. ...@@ -10,3 +10,4 @@ are configurable at compile, boot or run time.
:maxdepth: 1 :maxdepth: 1
l1tf l1tf
mds
...@@ -445,6 +445,7 @@ The default is 'cond'. If 'l1tf=full,force' is given on the kernel command ...@@ -445,6 +445,7 @@ The default is 'cond'. If 'l1tf=full,force' is given on the kernel command
line, then 'always' is enforced and the kvm-intel.vmentry_l1d_flush line, then 'always' is enforced and the kvm-intel.vmentry_l1d_flush
module parameter is ignored and writes to the sysfs file are rejected. module parameter is ignored and writes to the sysfs file are rejected.
.. _mitigation_selection:
Mitigation selection guide Mitigation selection guide
-------------------------- --------------------------
......
This diff is collapsed.
...@@ -2409,6 +2409,8 @@ ...@@ -2409,6 +2409,8 @@
Not specifying this option is equivalent to Not specifying this option is equivalent to
mds=full. mds=full.
For details see: Documentation/admin-guide/hw-vuln/mds.rst
mem=nn[KMG] [KNL,BOOT] Force usage of a specific amount of memory mem=nn[KMG] [KNL,BOOT] Force usage of a specific amount of memory
Amount of memory to be used when the kernel is not able Amount of memory to be used when the kernel is not able
to see the whole system memory or for test. to see the whole system memory or for test.
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment