KVM Forum 2018

The recent discovery of the Spectre and Meltdown vulnerabilities has
been an unfortunate disruption in the otherwise rapid pace of KVM/arm
development. Significant efforts have been put into analysing how CPU
implementations are affected, and in developing a mitigation framework
that covers both KVM and VMs by allowing VMs to call hypervisor
services to mitigate the vulnerabilities in the virtual machine.

This talk will briefly explain how the vulnerabilities affect ARM
systems and describe the range of techniques introduced in KVM/arm to
mitigate Spectre v2, v3, v3a and v4. We will explain how our
mitigation framework hides as much of the diversity of CPU
implementations and system integration while trying to keep the
overhead as low as possible.