github/acrn-hypervisor
1
0
Fork 0
mirror of https://github.com/projectacrn/acrn-hypervisor.git synced 2025-08-04 09:50:54 +00:00
Code Issues Projects Releases Wiki Activity

doc: update 3.0.1 release notes

Browse Source 
Clarify description of CVE fix (only impacts ACRN implementation on
Alder Lake platforms), and improve description of the ACRN shell's new
vmexit command.

Signed-off-by: David B. Kinder <david.b.kinder@intel.com>
This commit is contained in:
David B. Kinder 2022-08-04 13:30:42 -07:00 committed by David Kinder
parent ddefbfa6b9
commit c1a4b77a93
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
doc/release_notes/release_notes_3.0.1.rst
View File

@ -36,19 +36,19 @@ What's New in v3.0.1
******************** ********************
Mitigation for Return Stack Buffer Underflow security vulnerability Mitigation for Return Stack Buffer Underflow security vulnerability
For platforms that supports RRSBA (Restricted Return Stack Buffer When running ACRN on Alder Lake platforms that support RRSBA (Restricted Return Stack Buffer
Alternate), using retpoline may not be sufficient to guard against branch Alternate), using retpoline may not be sufficient to guard against branch
history injection or intra-mode branch target injection. RRSBA must history injection or intra-mode branch target injection. RRSBA must
be disabled to prevent CPUs from using alternate predictors for RETs. be disabled for Alder Lake platforms to prevent CPUs from using alternate predictors for RETs.
(Addresses security issue tracked by CVE-2022-29901 and CVE-2022-28693.) (Addresses security issue tracked by CVE-2022-29901 and CVE-2022-28693.)
ACRN shell commands added for real-time performance profiling ACRN shell commands added for real-time performance profiling
ACRN shell commands were added to sample vmexit data per virtual CPU to ACRN shell commands were added to sample vmexit data per virtual CPU to
facilitate real-time performance profiling: facilitate real-time performance profiling:
* ``vmexit clear``: clears current vmexit buffer
* ``vmexit [vm_id]``: outputs vmexit info per vCPU
* ``vmexit enable | disable``: enabled by default * ``vmexit enable | disable``: enabled by default
* ``vmexit clear``: clears current vmexit buffer
* ``vmexit [vm_id]``: outputs vmexit reason code and latency count information per vCPU
for a VM ID (or for all VM IDs if none is specified).
See :ref:`release_notes_3.0` for additional release information. See :ref:`release_notes_3.0` for additional release information.