On 28.10.2024 16:49, Alejandro Vallejo wrote: > Overwrite the MPX data dumped in the idle XSAVE area to avoid leaking > it. While it's not very sensitive, better to err on the side of caution. > > Signed-off-by: Alejandro Vallejo <[email protected]> > --- > Depending on whether the idle domain is considered ASI or non-ASI this > might or might not be enough. If the idle domain is not ASI the XSAVE > area would be in the directmap, which would render the zap ineffective > because it would still be transiently readable from another pCPU.
Yet that needs to be known / decided before this change can sensibly be acked. Jan
