Re:Mitigations to the “Memory Sinkhole”
by the8472 on Friday August 07, 2015 @05:50PM
(#10025220)
> seems to indicate it does for Haswell and above.
and the exploit affects CPUs below sandy bridge, so that's of no use to the affected users if they want to use a virtualization solution inside their main OS (instead of cooperating with the underlying hypervisor)
> I thought one of the features of hardware virtualization support was to mask the fact that you are being virtualized
You could simply have a virtual CPU that does not support virtualization.
Or you could trap the offending instructions and emulate it in software. But that would come at a performance penalty that GP wants to avoid.
and the exploit affects CPUs below sandy bridge, so that's of no use to the affected users if they want to use a virtualization solution inside their main OS (instead of cooperating with the underlying hypervisor)
> I thought one of the features of hardware virtualization support was to mask the fact that you are being virtualized
You could simply have a virtual CPU that does not support virtualization.
Or you could trap the offending instructions and emulate it in software. But that would come at a performance penalty that GP wants to avoid.