Commit 2c7e82a3 authored by Daniel P. Berrangé's avatar Daniel P. Berrangé Committed by Eduardo Habkost
Browse files

docs: recommend use of md-clear feature on all Intel CPUs 



Update x86 CPU model guidance to recommend that the md-clear feature is
manually enabled with all Intel CPU models, when supported by the host
microcode.

Signed-off-by: default avatarDaniel P. Berrangé <berrange@redhat.com>
Message-Id: <20190515141011.5315-3-berrange@redhat.com>
Signed-off-by: default avatarEduardo Habkost <ehabkost@redhat.com>
parent b2ae5210

docs/qemu-cpu-models.texi

+12 −0
Original line number Diff line number Diff line
@@ -200,6 +200,18 @@ Not included by default in any Intel CPU model. 
Should be explicitly turned on for all Intel CPU models.



Note that not all CPU hardware will support this feature.



@item @code{md-clear}



Required to confirm the MDS (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130,

CVE-2019-11091) fixes.



Not included by default in any Intel CPU model.



Must be explicitly turned on for all Intel CPU models.



Requires the host CPU microcode to support this feature before it

can be used for guest CPUs.

@end table