File 1dbca2ec-CVE-2018-3639.patch of Package libvirt.11696
commit 1dbca2eccad58d91a5fd33962854f1a653638182
Author: Daniel P. Berrangé <berrange@redhat.com>
Date: Mon May 21 23:05:07 2018 +0100
cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)
New microcode introduces the "Speculative Store Bypass Disable"
CPUID feature bit. This needs to be exposed to guest OS to allow
them to protect against CVE-2018-3639.
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
Reviewed-by: Jiri Denemark <jdenemar@redhat.com>
Index: libvirt-1.2.18.4/src/cpu/cpu_map.xml
===================================================================
--- libvirt-1.2.18.4.orig/src/cpu/cpu_map.xml
+++ libvirt-1.2.18.4/src/cpu/cpu_map.xml
@@ -350,6 +350,9 @@
<feature name='spec-ctrl'>
<cpuid function='0x07' edx='0x04000000'/>
</feature>
+ <feature name='ssbd'>
+ <cpuid function='0x07' edx='0x80000000'/>
+ </feature>
<!-- More AMD-specific features -->
<feature name='ibpb'>