NetBSD Problem Report #58085

From www@netbsd.org  Thu Mar 28 14:05:48 2024
Return-Path: <www@netbsd.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
	(Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified))
	by mollari.NetBSD.org (Postfix) with ESMTPS id 88BBF1A9239
	for <gnats-bugs@gnats.NetBSD.org>; Thu, 28 Mar 2024 14:05:48 +0000 (UTC)
Message-Id: <20240328140547.15C211A923B@mollari.NetBSD.org>
Date: Thu, 28 Mar 2024 14:05:47 +0000 (UTC)
From: campbell+netbsd@mumble.net
Reply-To: campbell+netbsd@mumble.net
To: gnats-bugs@NetBSD.org
Subject: RFDS mitigations -- Register File Data Sampling
X-Send-Pr-Version: www-1.0

>Number:         58085
>Category:       port-amd64
>Synopsis:       RFDS mitigations -- Register File Data Sampling
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    port-amd64-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Mar 28 14:10:00 +0000 2024
>Last-Modified:  Thu Mar 28 14:20:01 +0000 2024
>Originator:     Taylor R Campbell
>Release:        current, 10, 9, 8, ...
>Organization:
The NetBSDomainbypass Foundation
>Environment:
>Description:
New Spectre-class vulnerability -- we may need to adjust our MDS_LEAVE hotpatch sequence to address it, and maybe apply a firmware update:

https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/register-file-data-sampling.html

OpenBSD change for comparison:

https://freshbsd.org/openbsd/src/commit/ykX9FLsfLUh5VFFk
>How-To-Repeat:
use an affected Intel CPU
>Fix:
Yes, please!

>Audit-Trail:
From: Taylor R Campbell <riastradh@NetBSD.org>
To: gnats-bugs@NetBSD.org, netbsd-bugs@NetBSD.org
Cc: 
Subject: Re: port-amd64/58085: RFDS mitigations -- Register File Data Sampling
Date: Thu, 28 Mar 2024 14:15:50 +0000

 And make sure to update this page too, or perhaps create a new one:

 https://wiki.NetBSD.org/security/intel_mds/

Home	PR Database Search