Re: [PATCH] x86/pti: don't report XenPV as vulnerable

From: Jiri Kosina
Date: Fri Jun 15 2018 - 02:16:42 EST


On Fri, 15 Jun 2018, Juergen Gross wrote:

> >> wrong for 64-bit, too, in case the mitigation is disabled at hypervisor
> >> level.
> >
> > If that is indeed possible (is it?), then the check we have in
> > pti_check_boottime_disable() is wrong as well.
>
> No, it isn't. PTI for 32-bit kernels isn't paravirtualized, so it has to
> be disabled.

I was talking about this "mitigation disabled at Xen hypervisor level for
64-bit" situation though.

--
Jiri Kosina
SUSE Labs