0000231: [Anolis 8.2/4]dmesg check:MDS CPU bug present and SMT on, data leak possible；TAA CPU bug present and SMT on, data leak possible.

编号	项目	分类	查看权限	报告日期	最后更新

0000231	Anolis OS 8	kernel	public	2021-08-24 17:23	2021-09-07 10:54

报告员	anolis_account	分派给	Shiloong
优先级	low	严重性	minor	出现频率	always
状态	assigned	处理状况	open
平台	x86_64	操作系统	Anolis OS	操作系统版本	8

标题	0000231: [Anolis 8.2/4]dmesg check:MDS CPU bug present and SMT on, data leak possible；TAA CPU bug present and SMT on, data leak possible.
描述	dmesg 检查发现报错信息涉及镜像 Anolis 8.2 x86_64 rhck Anolis 8.2 x86_64 anck Anolis 8.4 x86_64 rhck Anolis 8.4 x86_64 anck 报错信息： # dmesg -l warn -T [Tue Aug 24 16:44:00 2021] MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. [Tue Aug 24 16:44:00 2021] TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details.
问题重现步骤	reboot，检查dmesg信息 dmesg -l warn -T
标签	没加标签.

Shiloong 2021-08-31 11:34 开发人员 ~0000365	这个warning是CPU 安全漏洞提醒, 加命令行参数 mds=full,nosmt 可以缓解, 但对性能有影响. 这个需要评估风险, 这个 warning 低优先级跟进.

yinyongchen 2021-09-07 10:54 报告者 ~0000379	Anolis 8.2 QU1 镜像安装虚拟机后，也有相同问题 Anolis 8.2 QU1 镜像安装虚拟机后，也有相同问题 --------- rhck # dmesg -l warn -T [Tue Sep 7 02:51:48 2021] MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. [Tue Sep 7 02:51:48 2021] TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details. -------- anck # dmesg -l warn -T [Mon Sep 6 23:46:46 2021] MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. [Mon Sep 6 23:46:46 2021] TAA CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/tsx_async_abort.html for more details.