Xen Project Meltdown and Spectre Technical FAQ: Difference between revisions

From Xen
Jump to navigationJump to search
(→‎Where can I find the current patch series that fixes Meltdown/SP3: Refer to XSA 254 as the information on the wiki has now been superseded by the XSA)
Line 1: Line 1:
== Where can I find the current patch series that fixes Meltdown/SP3 ==
== Where can I find the current patch series that fixes Meltdown/SP3 ==


⚫
Please refer to [http://xenbits.xen.org/xsa/advisory-254.html XSA-254] for more details.
For guests with legacy PV kernels which cannot be run in HVM or PVH mode directly, we have developed two "shim" hypervisors that allow PV guests to run in HVM mode or PVH mode. The HVM shim (codenamed
"Vixen") is available now (please refer to [http://xenbits.xen.org/xsa/advisory-254.html XSA-254] for more details). We expect to have the PVH shim (codenamed "Comet") available within a few days.

Released:
⚫
* '''Vixen''' (see [http://xenbits.xen.org/xsa/advisory-254.html XSA-254])
* '''Comet''' (see [http://xenbits.xen.org/xsa/advisory-254.html XSA-254]) - only for Xen 4.10 and 4.8

Development versions (older and ongoing):
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/threads.html#01057 Comet: Run PV in PVH container] (Citrix)
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/threads.html#00497 Vixen: A PV-in-HVM shim] (Amazon)
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/threads.html#01259 x86: initial simplistic Meltdown mitigation]
* ''Note that newer versions of these patches appear at high velocity'': please always check the xen-devel@ archives for the latest version

Note the following comment in the Vixen series: ''This series is very similar to the PVH series posted by Wei and we have been discussing how to merge efforts. We were hoping to have more time to work this out. I am posting this because I'm fairly confident that this series is complete (all PV instances in EC2 are using this) and others might find it useful. I also wanted to have more of a discussion about the best way to merge and some of the differences in designs.''

Other related patches under discussion
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/threads.html#00274 x86: Prerequisite work for a Xen KAISER solution] - These patches are presented to start a discussion of the issues and to inform the decision on how to fix the issue for older Xen releases. The series as a whole is not in a suitable state for committing.


== Where can I find the current patch series that fixes Spectre/SP2 ==
== Where can I find the current patch series that fixes Spectre/SP2 ==

Revision as of 10:18, 19 January 2018

Where can I find the current patch series that fixes Meltdown/SP3

Please refer to XSA-254 for more details.

Where can I find the current patch series that fixes Spectre/SP2

See

Retrieved from "https://wiki.xenproject.org/index.php?title=Xen_Project_Meltdown_and_Spectre_Technical_FAQ&oldid=18512"