target/i386: introduce SapphireRapids-v6 to expose ITS_NO
Expose ITS_NO by default, as users using Sapphire Rapids and higher CPU models would not be able to live migrate to lower CPU hosts due to missing features. In that case, they would not be vulnerable to ITS. its-no was originally added on [1], but needs to be exposed on the individual CPU models for the guests to see by default. [1] 74978391b2da ("target/i386: Make ITS_NO available to guests") Cc: Pawan Gupta <pawan.kumar.gupta@linux.intel.com> Signed-off-by: Jon Kohler <jon@nutanix.com> Link: https://lore.kernel.org/r/20251106174626.49930-3-jon@nutanix.com Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Jon Kohler committed
Nov 6, 2025 at 10:46 UTC
856cb7bd35c1e79682b4448cb2e8c5f8c2077541
1 file changed
+9
target/i386/cpu.c
+9
@@ -5261,6 +5261,15 @@ static const X86CPUDefinition builtin_x86_defs[] = {
5261
{ /* end of list */ },
5262
}
5263
},
5264
+ {
5265
+ .version = 6,
5266
+ .note = "with cet-ss, cet-ibt, its-no",
5267
+ .cache_info = &xeon_spr_cache_info,
5268
+ .props = (PropValue[]) {
5269
+ { "its-no", "on" },
5270
+ { /* end of list */ },
5271
+ }
5272
+ },
5273
{ /* end of list */ }
5274
}
5275
},