Difference between revisions of "Xen Project Meltdown and Spectre Technical FAQ"

From Xen
Line 2: Line 2:
   
 
See
 
See
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/msg00188.html Run PV guest in PVH container (Citrix)]
+
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/msg00188.html Run PV guest in PVH container] (Citrix)
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/msg00497.html Vixen: A PV-in-HVM shim (Amazon)]
+
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/msg00497.html Vixen: A PV-in-HVM shim] (Amazon)
  +
* ''Note that newer versions of these patches appear at high velocity'': please always check the xen-devel@ archives for the latest version
   
 
Note the following comment in the Vixen series: ''This series is very similar to the PVH series posted by Wei and we have been discussing how to merge efforts. We were hoping to have more time to work this out. I am posting this because I'm fairly confident that this series is complete (all PV instances in EC2 are using this) and others might find it useful. I also wanted to have more of a discussion about the best way to merge and some of the differences in designs.''
 
Note the following comment in the Vixen series: ''This series is very similar to the PVH series posted by Wei and we have been discussing how to merge efforts. We were hoping to have more time to work this out. I am posting this because I'm fairly confident that this series is complete (all PV instances in EC2 are using this) and others might find it useful. I also wanted to have more of a discussion about the best way to merge and some of the differences in designs.''
Line 12: Line 13:
 
== Where can I find the current patch series that fixes Spectre/SP2 ==
 
== Where can I find the current patch series that fixes Spectre/SP2 ==
   
  +
See
See [https://lists.xenproject.org/archives/html/xen-devel/2018-01/msg00110.html x86: Mitigations for SP2/CVE-2017-5715/Branch Target Injection]
 
  +
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/msg00110.html x86: Mitigations for SP2/CVE-2017-5715/Branch Target Injection]
  +
* ''Note that newer versions of these patches appear at high velocity'': please always check the xen-devel@ archives for the latest version
   
 
== Are there any other documents I should read? ==
 
== Are there any other documents I should read? ==

Revision as of 10:26, 8 January 2018

Where can I find the current patch series that fixes Meltdown/SP3

See

Note the following comment in the Vixen series: This series is very similar to the PVH series posted by Wei and we have been discussing how to merge efforts. We were hoping to have more time to work this out. I am posting this because I'm fairly confident that this series is complete (all PV instances in EC2 are using this) and others might find it useful. I also wanted to have more of a discussion about the best way to merge and some of the differences in designs.

Other related patches under discussion

  • x86: Prerequisite work for a Xen KAISER solution - These patches are presented to start a discussion of the issues and to inform the decision on how to fix the issue for older Xen releases. The series as a whole is not in a suitable state for committing.

Where can I find the current patch series that fixes Spectre/SP2

See

Are there any other documents I should read?

See Respond to Meltdown and Spectre, Blog FAQ and xen-devel@ thread