fix: CVE-2024-3635[0,7] don't print lines about TSA CPUID bits under non-AMD

This commit is contained in:
Stéphane Lesimple
2026-04-06 03:09:18 +02:00
parent c4bb8cc1f3
commit fe9306fb8c
2 changed files with 34 additions and 30 deletions

View File

@@ -93,6 +93,7 @@ check_CVE_2024_36350_linux() {
pstatus yellow NO pstatus yellow NO
fi fi
if is_amd || is_hygon; then
pr_info_nol "* CPU explicitly indicates not vulnerable to TSA-SQ (TSA_SQ_NO): " pr_info_nol "* CPU explicitly indicates not vulnerable to TSA-SQ (TSA_SQ_NO): "
if [ "$cap_tsa_sq_no" = 1 ]; then if [ "$cap_tsa_sq_no" = 1 ]; then
pstatus green YES pstatus green YES
@@ -110,6 +111,7 @@ check_CVE_2024_36350_linux() {
else else
pstatus yellow UNKNOWN "couldn't read CPUID leaf 0x80000021" pstatus yellow UNKNOWN "couldn't read CPUID leaf 0x80000021"
fi fi
fi
pr_info_nol "* Hyper-Threading (SMT) is enabled: " pr_info_nol "* Hyper-Threading (SMT) is enabled: "
is_cpu_smt_enabled is_cpu_smt_enabled

View File

@@ -93,6 +93,7 @@ check_CVE_2024_36357_linux() {
pstatus yellow NO pstatus yellow NO
fi fi
if is_amd || is_hygon; then
pr_info_nol "* CPU explicitly indicates not vulnerable to TSA-L1 (TSA_L1_NO): " pr_info_nol "* CPU explicitly indicates not vulnerable to TSA-L1 (TSA_L1_NO): "
if [ "$cap_tsa_l1_no" = 1 ]; then if [ "$cap_tsa_l1_no" = 1 ]; then
pstatus green YES pstatus green YES
@@ -110,6 +111,7 @@ check_CVE_2024_36357_linux() {
else else
pstatus yellow UNKNOWN "couldn't read CPUID leaf 0x80000021" pstatus yellow UNKNOWN "couldn't read CPUID leaf 0x80000021"
fi fi
fi
elif [ "$sys_interface_available" = 0 ]; then elif [ "$sys_interface_available" = 0 ]; then
# we have no sysfs but were asked to use it only! # we have no sysfs but were asked to use it only!