Define md-clear CPUID bit.
Assuming an updated host kernel and microcode, the md-clear bit will be automatically exposed to guests using the QEMU "-cpu host" arg, or libvirt "host-model" or "host-passthrough" configurations.
Guests using a named CPU model it must be manually updated to add this extra CPU feature.
Resolves CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
sudo dnf upgrade --refresh --advisory=FEDORA-2019-0332a96d31
Please login to add feedback.
This update has been submitted for testing by berrange.
This update has been pushed to testing.
Works great! LGTM! =)
Works for me.
I tested with these on the host:
And created a fresh F29 guest (also running the same kernel as the host):
The guest is running with CPU mode 'host-model'.
And I do see the 'md_clear' visible in
/proc/cpuinfoin the guest:
This update has been submitted for batched by berrange.
This update has been submitted for stable by berrange.
This update has been pushed to stable.