[PATCH v5 3/3] x86/cpu: Required feature bits sanity check
From: Maciej Wieczor-Retman
Date: Thu Feb 12 2026 - 10:37:10 EST
From: Maciej Wieczor-Retman <maciej.wieczor-retman@xxxxxxxxx>
After cpu identification concludes, do a sanity check by comparing the
final x86_capability bitmask with the pre-defined required feature bits.
Signed-off-by: Maciej Wieczor-Retman <maciej.wieczor-retman@xxxxxxxxx>
---
arch/x86/kernel/cpu/common.c | 32 ++++++++++++++++++++++++++++++++
1 file changed, 32 insertions(+)
diff --git a/arch/x86/kernel/cpu/common.c b/arch/x86/kernel/cpu/common.c
index 7aede0760ebc..5cf4f7174be8 100644
--- a/arch/x86/kernel/cpu/common.c
+++ b/arch/x86/kernel/cpu/common.c
@@ -1987,6 +1987,36 @@ const char *x86_cap_name(unsigned int bit)
return undef_buf;
}
+/*
+ * As a sanity check compare the final x86_capability bitmask with the initial
+ * predefined required feature bits. In case of a mismatch emit a warning with
+ * the faulty bitmask value.
+ */
+static void verify_required_features(const struct cpuinfo_x86 *c)
+{
+ u32 missing[NCAPINTS] = REQUIRED_MASK_INITIALIZER;
+ u32 error = 0;
+ unsigned int i;
+
+ for (i = 0; i < NCAPINTS; i++) {
+ missing[i] &= ~c->x86_capability[i];
+ error |= missing[i];
+ }
+
+ if (!error)
+ return; /* All good */
+
+ /*
+ * At least one required feature is missing. Print a warning,
+ * and taint the kernel.
+ */
+ pr_warn("cpu %d: missing required feature(s):", c->cpu_index);
+ for_each_set_bit(i, (void *)missing, NCAPINTS << 5)
+ pr_cont(" %s", x86_cap_name(i));
+ pr_cont("\n");
+ add_taint(TAINT_CPU_OUT_OF_SPEC, LOCKDEP_STILL_OK);
+}
+
/*
* This does the hard work of actually picking apart the CPU stuff...
*/
@@ -2116,6 +2146,8 @@ static void identify_cpu(struct cpuinfo_x86 *c)
mcheck_cpu_init(c);
numa_add_cpu(smp_processor_id());
+
+ verify_required_features(c);
}
/*
--
2.53.0