AMD Preparing Linux For Enhanced SMT Protection 'ESMTP' For EPYC VMs

AMD is preparing Linux for Enhanced SMT Protection 'ESMTP' for EPYC VMs with SEV-SNP. This is the first time ESMTP is on the Linux kernel mailing list.

By Michael LarabelSep 14phoronix.com1 min read

Intelligence analysis by Qwen 2.5 (3B)

AMD Preparing Linux For Enhanced SMT Protection 'ESMTP' For EPYC VMs — Image: phoronix.com

AMD is working on enhancing SMT protection for EPYC VMs with SEV-SNP, a feature that aims to mitigate side-channel attacks.

AMD is making Linux better at keeping secrets by making sure that the parts of a computer that share a core don't talk to each other too much. This helps keep your data safe from bad guys.

Analysis

{"# Enhanced SMT Protection ESMTP":"The Enhanced SMT Protection (ESMTP) feature is designed to ensure that SMT sibling threads are either idle in host mode or running a vCPU of the guest itself. This is a hardware-based solution to mitigate side-channel attacks.","# AMD EPYC 9006 'Venice' Processors":"The ESMTP feature is expected to be part of the AMD EPYC 9006 'Venice' server processors. This is the first time ESMTP is being enabled in the Linux kernel.","# QEMU and OVMF Upstreaming":"In addition to the Linux kernel patches, there are also patches needed for upstreaming against QEMU and OVMF. This ensures that the feature is available in these tools as well.","# Performance Considerations":"While ESMTP is a hardware-based solution, it does come with a performance cost. It is not enabled by default and is only available for those who want to ensure better SMT sibling thread security, such as for public cloud deployments or running untrusted workloads."}

Key points

ESMTP is a new feature for AMD EPYC processors in Linux
It aims to prevent side-channel attacks by ensuring SMT sibling threads are either idle or running a guest's vCPU
It is not enabled by default and is only available for those who want better security
It comes with a small performance cost
It is expected to be part of the AMD EPYC 9006 'Venice' processors

The Upside

With ESMTP, virtual machines can be more secure, which could lead to better cloud services and safer workloads.

The Downside

There might be a small slowdown in performance when using ESMTP, but it's worth it for better security.

Tagsopen-source linux amd security smt

More from this desk

Another Dozen Vulnerabilities Found In The X.Org Server & XWayland

Oct 7phoronix.com

Another Dozen Vulnerabilities Found In The X.Org Server & XWayland

Twelve new security vulnerabilities have been discovered in the X.Org Server and XWayland, including use-after-free and buffer overflow issues. These affect versions prior to xorg-server-21.1.25 and xwayland-24.1.14.

Oct 7github.com

Keras 3 Unifies Deep Learning with Multi-Backend Support

Keras 3 is a new multi-backend deep learning framework supporting JAX, TensorFlow, PyTorch, and OpenVINO.

Oct 7github.com

Dify Unifies LLM App Development with Visual Workflows, RAG, and Autonomous Agents

Dify is an open-source platform designed to streamline the development of large language model applications, offering an intuitive interface for AI workflows, RAG pipelines, and agent capabilities.

OpenHands/OpenHands repository on GitHub

Oct 7github.com

OpenHands Agent Canvas Unifies Control for Self-Hosted AI Coding Agents

OpenHands Agent Canvas is a self-hosted developer control center that orchestrates AI coding agents and automations across various backends, enabling developers to manage and deploy agents for tasks like report generation and GitHub issue decomposition.