Loading...
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 * CPU Microcode Update Driver for Linux
4 *
5 * Copyright (C) 2000-2006 Tigran Aivazian <aivazian.tigran@gmail.com>
6 * 2006 Shaohua Li <shaohua.li@intel.com>
7 * 2013-2016 Borislav Petkov <bp@alien8.de>
8 *
9 * X86 CPU microcode early update for Linux:
10 *
11 * Copyright (C) 2012 Fenghua Yu <fenghua.yu@intel.com>
12 * H Peter Anvin" <hpa@zytor.com>
13 * (C) 2015 Borislav Petkov <bp@alien8.de>
14 *
15 * This driver allows to upgrade microcode on x86 processors.
16 */
17
18#define pr_fmt(fmt) "microcode: " fmt
19
20#include <linux/platform_device.h>
21#include <linux/stop_machine.h>
22#include <linux/syscore_ops.h>
23#include <linux/miscdevice.h>
24#include <linux/capability.h>
25#include <linux/firmware.h>
26#include <linux/cpumask.h>
27#include <linux/kernel.h>
28#include <linux/delay.h>
29#include <linux/mutex.h>
30#include <linux/cpu.h>
31#include <linux/nmi.h>
32#include <linux/fs.h>
33#include <linux/mm.h>
34
35#include <asm/apic.h>
36#include <asm/cpu_device_id.h>
37#include <asm/perf_event.h>
38#include <asm/processor.h>
39#include <asm/cmdline.h>
40#include <asm/setup.h>
41
42#include "internal.h"
43
44static struct microcode_ops *microcode_ops;
45bool dis_ucode_ldr = true;
46
47bool force_minrev = IS_ENABLED(CONFIG_MICROCODE_LATE_FORCE_MINREV);
48module_param(force_minrev, bool, S_IRUSR | S_IWUSR);
49
50/*
51 * Synchronization.
52 *
53 * All non cpu-hotplug-callback call sites use:
54 *
55 * - cpus_read_lock/unlock() to synchronize with
56 * the cpu-hotplug-callback call sites.
57 *
58 * We guarantee that only a single cpu is being
59 * updated at any particular moment of time.
60 */
61struct ucode_cpu_info ucode_cpu_info[NR_CPUS];
62
63struct cpu_info_ctx {
64 struct cpu_signature *cpu_sig;
65 int err;
66};
67
68/*
69 * Those patch levels cannot be updated to newer ones and thus should be final.
70 */
71static u32 final_levels[] = {
72 0x01000098,
73 0x0100009f,
74 0x010000af,
75 0, /* T-101 terminator */
76};
77
78struct early_load_data early_data;
79
80/*
81 * Check the current patch level on this CPU.
82 *
83 * Returns:
84 * - true: if update should stop
85 * - false: otherwise
86 */
87static bool amd_check_current_patch_level(void)
88{
89 u32 lvl, dummy, i;
90 u32 *levels;
91
92 native_rdmsr(MSR_AMD64_PATCH_LEVEL, lvl, dummy);
93
94 levels = final_levels;
95
96 for (i = 0; levels[i]; i++) {
97 if (lvl == levels[i])
98 return true;
99 }
100 return false;
101}
102
103static bool __init check_loader_disabled_bsp(void)
104{
105 static const char *__dis_opt_str = "dis_ucode_ldr";
106 const char *cmdline = boot_command_line;
107 const char *option = __dis_opt_str;
108
109 /*
110 * CPUID(1).ECX[31]: reserved for hypervisor use. This is still not
111 * completely accurate as xen pv guests don't see that CPUID bit set but
112 * that's good enough as they don't land on the BSP path anyway.
113 */
114 if (native_cpuid_ecx(1) & BIT(31))
115 return true;
116
117 if (x86_cpuid_vendor() == X86_VENDOR_AMD) {
118 if (amd_check_current_patch_level())
119 return true;
120 }
121
122 if (cmdline_find_option_bool(cmdline, option) <= 0)
123 dis_ucode_ldr = false;
124
125 return dis_ucode_ldr;
126}
127
128void __init load_ucode_bsp(void)
129{
130 unsigned int cpuid_1_eax;
131 bool intel = true;
132
133 if (!have_cpuid_p())
134 return;
135
136 cpuid_1_eax = native_cpuid_eax(1);
137
138 switch (x86_cpuid_vendor()) {
139 case X86_VENDOR_INTEL:
140 if (x86_family(cpuid_1_eax) < 6)
141 return;
142 break;
143
144 case X86_VENDOR_AMD:
145 if (x86_family(cpuid_1_eax) < 0x10)
146 return;
147 intel = false;
148 break;
149
150 default:
151 return;
152 }
153
154 if (check_loader_disabled_bsp())
155 return;
156
157 if (intel)
158 load_ucode_intel_bsp(&early_data);
159 else
160 load_ucode_amd_bsp(&early_data, cpuid_1_eax);
161}
162
163void load_ucode_ap(void)
164{
165 unsigned int cpuid_1_eax;
166
167 if (dis_ucode_ldr)
168 return;
169
170 cpuid_1_eax = native_cpuid_eax(1);
171
172 switch (x86_cpuid_vendor()) {
173 case X86_VENDOR_INTEL:
174 if (x86_family(cpuid_1_eax) >= 6)
175 load_ucode_intel_ap();
176 break;
177 case X86_VENDOR_AMD:
178 if (x86_family(cpuid_1_eax) >= 0x10)
179 load_ucode_amd_ap(cpuid_1_eax);
180 break;
181 default:
182 break;
183 }
184}
185
186struct cpio_data __init find_microcode_in_initrd(const char *path)
187{
188#ifdef CONFIG_BLK_DEV_INITRD
189 unsigned long start = 0;
190 size_t size;
191
192#ifdef CONFIG_X86_32
193 size = boot_params.hdr.ramdisk_size;
194 /* Early load on BSP has a temporary mapping. */
195 if (size)
196 start = initrd_start_early;
197
198#else /* CONFIG_X86_64 */
199 size = (unsigned long)boot_params.ext_ramdisk_size << 32;
200 size |= boot_params.hdr.ramdisk_size;
201
202 if (size) {
203 start = (unsigned long)boot_params.ext_ramdisk_image << 32;
204 start |= boot_params.hdr.ramdisk_image;
205 start += PAGE_OFFSET;
206 }
207#endif
208
209 /*
210 * Fixup the start address: after reserve_initrd() runs, initrd_start
211 * has the virtual address of the beginning of the initrd. It also
212 * possibly relocates the ramdisk. In either case, initrd_start contains
213 * the updated address so use that instead.
214 */
215 if (initrd_start)
216 start = initrd_start;
217
218 return find_cpio_data(path, (void *)start, size, NULL);
219#else /* !CONFIG_BLK_DEV_INITRD */
220 return (struct cpio_data){ NULL, 0, "" };
221#endif
222}
223
224static void reload_early_microcode(unsigned int cpu)
225{
226 int vendor, family;
227
228 vendor = x86_cpuid_vendor();
229 family = x86_cpuid_family();
230
231 switch (vendor) {
232 case X86_VENDOR_INTEL:
233 if (family >= 6)
234 reload_ucode_intel();
235 break;
236 case X86_VENDOR_AMD:
237 if (family >= 0x10)
238 reload_ucode_amd(cpu);
239 break;
240 default:
241 break;
242 }
243}
244
245/* fake device for request_firmware */
246static struct platform_device *microcode_pdev;
247
248#ifdef CONFIG_MICROCODE_LATE_LOADING
249/*
250 * Late loading dance. Why the heavy-handed stomp_machine effort?
251 *
252 * - HT siblings must be idle and not execute other code while the other sibling
253 * is loading microcode in order to avoid any negative interactions caused by
254 * the loading.
255 *
256 * - In addition, microcode update on the cores must be serialized until this
257 * requirement can be relaxed in the future. Right now, this is conservative
258 * and good.
259 */
260enum sibling_ctrl {
261 /* Spinwait with timeout */
262 SCTRL_WAIT,
263 /* Invoke the microcode_apply() callback */
264 SCTRL_APPLY,
265 /* Proceed without invoking the microcode_apply() callback */
266 SCTRL_DONE,
267};
268
269struct microcode_ctrl {
270 enum sibling_ctrl ctrl;
271 enum ucode_state result;
272 unsigned int ctrl_cpu;
273 bool nmi_enabled;
274};
275
276DEFINE_STATIC_KEY_FALSE(microcode_nmi_handler_enable);
277static DEFINE_PER_CPU(struct microcode_ctrl, ucode_ctrl);
278static atomic_t late_cpus_in, offline_in_nmi;
279static unsigned int loops_per_usec;
280static cpumask_t cpu_offline_mask;
281
282static noinstr bool wait_for_cpus(atomic_t *cnt)
283{
284 unsigned int timeout, loops;
285
286 WARN_ON_ONCE(raw_atomic_dec_return(cnt) < 0);
287
288 for (timeout = 0; timeout < USEC_PER_SEC; timeout++) {
289 if (!raw_atomic_read(cnt))
290 return true;
291
292 for (loops = 0; loops < loops_per_usec; loops++)
293 cpu_relax();
294
295 /* If invoked directly, tickle the NMI watchdog */
296 if (!microcode_ops->use_nmi && !(timeout % USEC_PER_MSEC)) {
297 instrumentation_begin();
298 touch_nmi_watchdog();
299 instrumentation_end();
300 }
301 }
302 /* Prevent the late comers from making progress and let them time out */
303 raw_atomic_inc(cnt);
304 return false;
305}
306
307static noinstr bool wait_for_ctrl(void)
308{
309 unsigned int timeout, loops;
310
311 for (timeout = 0; timeout < USEC_PER_SEC; timeout++) {
312 if (raw_cpu_read(ucode_ctrl.ctrl) != SCTRL_WAIT)
313 return true;
314
315 for (loops = 0; loops < loops_per_usec; loops++)
316 cpu_relax();
317
318 /* If invoked directly, tickle the NMI watchdog */
319 if (!microcode_ops->use_nmi && !(timeout % USEC_PER_MSEC)) {
320 instrumentation_begin();
321 touch_nmi_watchdog();
322 instrumentation_end();
323 }
324 }
325 return false;
326}
327
328/*
329 * Protected against instrumentation up to the point where the primary
330 * thread completed the update. See microcode_nmi_handler() for details.
331 */
332static noinstr bool load_secondary_wait(unsigned int ctrl_cpu)
333{
334 /* Initial rendezvous to ensure that all CPUs have arrived */
335 if (!wait_for_cpus(&late_cpus_in)) {
336 raw_cpu_write(ucode_ctrl.result, UCODE_TIMEOUT);
337 return false;
338 }
339
340 /*
341 * Wait for primary threads to complete. If one of them hangs due
342 * to the update, there is no way out. This is non-recoverable
343 * because the CPU might hold locks or resources and confuse the
344 * scheduler, watchdogs etc. There is no way to safely evacuate the
345 * machine.
346 */
347 if (wait_for_ctrl())
348 return true;
349
350 instrumentation_begin();
351 panic("Microcode load: Primary CPU %d timed out\n", ctrl_cpu);
352 instrumentation_end();
353}
354
355/*
356 * Protected against instrumentation up to the point where the primary
357 * thread completed the update. See microcode_nmi_handler() for details.
358 */
359static noinstr void load_secondary(unsigned int cpu)
360{
361 unsigned int ctrl_cpu = raw_cpu_read(ucode_ctrl.ctrl_cpu);
362 enum ucode_state ret;
363
364 if (!load_secondary_wait(ctrl_cpu)) {
365 instrumentation_begin();
366 pr_err_once("load: %d CPUs timed out\n",
367 atomic_read(&late_cpus_in) - 1);
368 instrumentation_end();
369 return;
370 }
371
372 /* Primary thread completed. Allow to invoke instrumentable code */
373 instrumentation_begin();
374 /*
375 * If the primary succeeded then invoke the apply() callback,
376 * otherwise copy the state from the primary thread.
377 */
378 if (this_cpu_read(ucode_ctrl.ctrl) == SCTRL_APPLY)
379 ret = microcode_ops->apply_microcode(cpu);
380 else
381 ret = per_cpu(ucode_ctrl.result, ctrl_cpu);
382
383 this_cpu_write(ucode_ctrl.result, ret);
384 this_cpu_write(ucode_ctrl.ctrl, SCTRL_DONE);
385 instrumentation_end();
386}
387
388static void __load_primary(unsigned int cpu)
389{
390 struct cpumask *secondaries = topology_sibling_cpumask(cpu);
391 enum sibling_ctrl ctrl;
392 enum ucode_state ret;
393 unsigned int sibling;
394
395 /* Initial rendezvous to ensure that all CPUs have arrived */
396 if (!wait_for_cpus(&late_cpus_in)) {
397 this_cpu_write(ucode_ctrl.result, UCODE_TIMEOUT);
398 pr_err_once("load: %d CPUs timed out\n", atomic_read(&late_cpus_in) - 1);
399 return;
400 }
401
402 ret = microcode_ops->apply_microcode(cpu);
403 this_cpu_write(ucode_ctrl.result, ret);
404 this_cpu_write(ucode_ctrl.ctrl, SCTRL_DONE);
405
406 /*
407 * If the update was successful, let the siblings run the apply()
408 * callback. If not, tell them it's done. This also covers the
409 * case where the CPU has uniform loading at package or system
410 * scope implemented but does not advertise it.
411 */
412 if (ret == UCODE_UPDATED || ret == UCODE_OK)
413 ctrl = SCTRL_APPLY;
414 else
415 ctrl = SCTRL_DONE;
416
417 for_each_cpu(sibling, secondaries) {
418 if (sibling != cpu)
419 per_cpu(ucode_ctrl.ctrl, sibling) = ctrl;
420 }
421}
422
423static bool kick_offline_cpus(unsigned int nr_offl)
424{
425 unsigned int cpu, timeout;
426
427 for_each_cpu(cpu, &cpu_offline_mask) {
428 /* Enable the rendezvous handler and send NMI */
429 per_cpu(ucode_ctrl.nmi_enabled, cpu) = true;
430 apic_send_nmi_to_offline_cpu(cpu);
431 }
432
433 /* Wait for them to arrive */
434 for (timeout = 0; timeout < (USEC_PER_SEC / 2); timeout++) {
435 if (atomic_read(&offline_in_nmi) == nr_offl)
436 return true;
437 udelay(1);
438 }
439 /* Let the others time out */
440 return false;
441}
442
443static void release_offline_cpus(void)
444{
445 unsigned int cpu;
446
447 for_each_cpu(cpu, &cpu_offline_mask)
448 per_cpu(ucode_ctrl.ctrl, cpu) = SCTRL_DONE;
449}
450
451static void load_primary(unsigned int cpu)
452{
453 unsigned int nr_offl = cpumask_weight(&cpu_offline_mask);
454 bool proceed = true;
455
456 /* Kick soft-offlined SMT siblings if required */
457 if (!cpu && nr_offl)
458 proceed = kick_offline_cpus(nr_offl);
459
460 /* If the soft-offlined CPUs did not respond, abort */
461 if (proceed)
462 __load_primary(cpu);
463
464 /* Unconditionally release soft-offlined SMT siblings if required */
465 if (!cpu && nr_offl)
466 release_offline_cpus();
467}
468
469/*
470 * Minimal stub rendezvous handler for soft-offlined CPUs which participate
471 * in the NMI rendezvous to protect against a concurrent NMI on affected
472 * CPUs.
473 */
474void noinstr microcode_offline_nmi_handler(void)
475{
476 if (!raw_cpu_read(ucode_ctrl.nmi_enabled))
477 return;
478 raw_cpu_write(ucode_ctrl.nmi_enabled, false);
479 raw_cpu_write(ucode_ctrl.result, UCODE_OFFLINE);
480 raw_atomic_inc(&offline_in_nmi);
481 wait_for_ctrl();
482}
483
484static noinstr bool microcode_update_handler(void)
485{
486 unsigned int cpu = raw_smp_processor_id();
487
488 if (raw_cpu_read(ucode_ctrl.ctrl_cpu) == cpu) {
489 instrumentation_begin();
490 load_primary(cpu);
491 instrumentation_end();
492 } else {
493 load_secondary(cpu);
494 }
495
496 instrumentation_begin();
497 touch_nmi_watchdog();
498 instrumentation_end();
499
500 return true;
501}
502
503/*
504 * Protection against instrumentation is required for CPUs which are not
505 * safe against an NMI which is delivered to the secondary SMT sibling
506 * while the primary thread updates the microcode. Instrumentation can end
507 * up in #INT3, #DB and #PF. The IRET from those exceptions reenables NMI
508 * which is the opposite of what the NMI rendezvous is trying to achieve.
509 *
510 * The primary thread is safe versus instrumentation as the actual
511 * microcode update handles this correctly. It's only the sibling code
512 * path which must be NMI safe until the primary thread completed the
513 * update.
514 */
515bool noinstr microcode_nmi_handler(void)
516{
517 if (!raw_cpu_read(ucode_ctrl.nmi_enabled))
518 return false;
519
520 raw_cpu_write(ucode_ctrl.nmi_enabled, false);
521 return microcode_update_handler();
522}
523
524static int load_cpus_stopped(void *unused)
525{
526 if (microcode_ops->use_nmi) {
527 /* Enable the NMI handler and raise NMI */
528 this_cpu_write(ucode_ctrl.nmi_enabled, true);
529 apic->send_IPI(smp_processor_id(), NMI_VECTOR);
530 } else {
531 /* Just invoke the handler directly */
532 microcode_update_handler();
533 }
534 return 0;
535}
536
537static int load_late_stop_cpus(bool is_safe)
538{
539 unsigned int cpu, updated = 0, failed = 0, timedout = 0, siblings = 0;
540 unsigned int nr_offl, offline = 0;
541 int old_rev = boot_cpu_data.microcode;
542 struct cpuinfo_x86 prev_info;
543
544 if (!is_safe) {
545 pr_err("Late microcode loading without minimal revision check.\n");
546 pr_err("You should switch to early loading, if possible.\n");
547 }
548
549 atomic_set(&late_cpus_in, num_online_cpus());
550 atomic_set(&offline_in_nmi, 0);
551 loops_per_usec = loops_per_jiffy / (TICK_NSEC / 1000);
552
553 /*
554 * Take a snapshot before the microcode update in order to compare and
555 * check whether any bits changed after an update.
556 */
557 store_cpu_caps(&prev_info);
558
559 if (microcode_ops->use_nmi)
560 static_branch_enable_cpuslocked(µcode_nmi_handler_enable);
561
562 stop_machine_cpuslocked(load_cpus_stopped, NULL, cpu_online_mask);
563
564 if (microcode_ops->use_nmi)
565 static_branch_disable_cpuslocked(µcode_nmi_handler_enable);
566
567 /* Analyze the results */
568 for_each_cpu_and(cpu, cpu_present_mask, &cpus_booted_once_mask) {
569 switch (per_cpu(ucode_ctrl.result, cpu)) {
570 case UCODE_UPDATED: updated++; break;
571 case UCODE_TIMEOUT: timedout++; break;
572 case UCODE_OK: siblings++; break;
573 case UCODE_OFFLINE: offline++; break;
574 default: failed++; break;
575 }
576 }
577
578 if (microcode_ops->finalize_late_load)
579 microcode_ops->finalize_late_load(!updated);
580
581 if (!updated) {
582 /* Nothing changed. */
583 if (!failed && !timedout)
584 return 0;
585
586 nr_offl = cpumask_weight(&cpu_offline_mask);
587 if (offline < nr_offl) {
588 pr_warn("%u offline siblings did not respond.\n",
589 nr_offl - atomic_read(&offline_in_nmi));
590 return -EIO;
591 }
592 pr_err("update failed: %u CPUs failed %u CPUs timed out\n",
593 failed, timedout);
594 return -EIO;
595 }
596
597 if (!is_safe || failed || timedout)
598 add_taint(TAINT_CPU_OUT_OF_SPEC, LOCKDEP_STILL_OK);
599
600 pr_info("load: updated on %u primary CPUs with %u siblings\n", updated, siblings);
601 if (failed || timedout) {
602 pr_err("load incomplete. %u CPUs timed out or failed\n",
603 num_online_cpus() - (updated + siblings));
604 }
605 pr_info("revision: 0x%x -> 0x%x\n", old_rev, boot_cpu_data.microcode);
606 microcode_check(&prev_info);
607
608 return updated + siblings == num_online_cpus() ? 0 : -EIO;
609}
610
611/*
612 * This function does two things:
613 *
614 * 1) Ensure that all required CPUs which are present and have been booted
615 * once are online.
616 *
617 * To pass this check, all primary threads must be online.
618 *
619 * If the microcode load is not safe against NMI then all SMT threads
620 * must be online as well because they still react to NMIs when they are
621 * soft-offlined and parked in one of the play_dead() variants. So if a
622 * NMI hits while the primary thread updates the microcode the resulting
623 * behaviour is undefined. The default play_dead() implementation on
624 * modern CPUs uses MWAIT, which is also not guaranteed to be safe
625 * against a microcode update which affects MWAIT.
626 *
627 * As soft-offlined CPUs still react on NMIs, the SMT sibling
628 * restriction can be lifted when the vendor driver signals to use NMI
629 * for rendezvous and the APIC provides a mechanism to send an NMI to a
630 * soft-offlined CPU. The soft-offlined CPUs are then able to
631 * participate in the rendezvous in a trivial stub handler.
632 *
633 * 2) Initialize the per CPU control structure and create a cpumask
634 * which contains "offline"; secondary threads, so they can be handled
635 * correctly by a control CPU.
636 */
637static bool setup_cpus(void)
638{
639 struct microcode_ctrl ctrl = { .ctrl = SCTRL_WAIT, .result = -1, };
640 bool allow_smt_offline;
641 unsigned int cpu;
642
643 allow_smt_offline = microcode_ops->nmi_safe ||
644 (microcode_ops->use_nmi && apic->nmi_to_offline_cpu);
645
646 cpumask_clear(&cpu_offline_mask);
647
648 for_each_cpu_and(cpu, cpu_present_mask, &cpus_booted_once_mask) {
649 /*
650 * Offline CPUs sit in one of the play_dead() functions
651 * with interrupts disabled, but they still react on NMIs
652 * and execute arbitrary code. Also MWAIT being updated
653 * while the offline CPU sits there is not necessarily safe
654 * on all CPU variants.
655 *
656 * Mark them in the offline_cpus mask which will be handled
657 * by CPU0 later in the update process.
658 *
659 * Ensure that the primary thread is online so that it is
660 * guaranteed that all cores are updated.
661 */
662 if (!cpu_online(cpu)) {
663 if (topology_is_primary_thread(cpu) || !allow_smt_offline) {
664 pr_err("CPU %u not online, loading aborted\n", cpu);
665 return false;
666 }
667 cpumask_set_cpu(cpu, &cpu_offline_mask);
668 per_cpu(ucode_ctrl, cpu) = ctrl;
669 continue;
670 }
671
672 /*
673 * Initialize the per CPU state. This is core scope for now,
674 * but prepared to take package or system scope into account.
675 */
676 ctrl.ctrl_cpu = cpumask_first(topology_sibling_cpumask(cpu));
677 per_cpu(ucode_ctrl, cpu) = ctrl;
678 }
679 return true;
680}
681
682static int load_late_locked(void)
683{
684 if (!setup_cpus())
685 return -EBUSY;
686
687 switch (microcode_ops->request_microcode_fw(0, µcode_pdev->dev)) {
688 case UCODE_NEW:
689 return load_late_stop_cpus(false);
690 case UCODE_NEW_SAFE:
691 return load_late_stop_cpus(true);
692 case UCODE_NFOUND:
693 return -ENOENT;
694 default:
695 return -EBADFD;
696 }
697}
698
699static ssize_t reload_store(struct device *dev,
700 struct device_attribute *attr,
701 const char *buf, size_t size)
702{
703 unsigned long val;
704 ssize_t ret;
705
706 ret = kstrtoul(buf, 0, &val);
707 if (ret || val != 1)
708 return -EINVAL;
709
710 cpus_read_lock();
711 ret = load_late_locked();
712 cpus_read_unlock();
713
714 return ret ? : size;
715}
716
717static DEVICE_ATTR_WO(reload);
718#endif
719
720static ssize_t version_show(struct device *dev,
721 struct device_attribute *attr, char *buf)
722{
723 struct ucode_cpu_info *uci = ucode_cpu_info + dev->id;
724
725 return sprintf(buf, "0x%x\n", uci->cpu_sig.rev);
726}
727
728static ssize_t processor_flags_show(struct device *dev,
729 struct device_attribute *attr, char *buf)
730{
731 struct ucode_cpu_info *uci = ucode_cpu_info + dev->id;
732
733 return sprintf(buf, "0x%x\n", uci->cpu_sig.pf);
734}
735
736static DEVICE_ATTR_RO(version);
737static DEVICE_ATTR_RO(processor_flags);
738
739static struct attribute *mc_default_attrs[] = {
740 &dev_attr_version.attr,
741 &dev_attr_processor_flags.attr,
742 NULL
743};
744
745static const struct attribute_group mc_attr_group = {
746 .attrs = mc_default_attrs,
747 .name = "microcode",
748};
749
750static void microcode_fini_cpu(int cpu)
751{
752 if (microcode_ops->microcode_fini_cpu)
753 microcode_ops->microcode_fini_cpu(cpu);
754}
755
756/**
757 * microcode_bsp_resume - Update boot CPU microcode during resume.
758 */
759void microcode_bsp_resume(void)
760{
761 int cpu = smp_processor_id();
762 struct ucode_cpu_info *uci = ucode_cpu_info + cpu;
763
764 if (uci->mc)
765 microcode_ops->apply_microcode(cpu);
766 else
767 reload_early_microcode(cpu);
768}
769
770static struct syscore_ops mc_syscore_ops = {
771 .resume = microcode_bsp_resume,
772};
773
774static int mc_cpu_online(unsigned int cpu)
775{
776 struct ucode_cpu_info *uci = ucode_cpu_info + cpu;
777 struct device *dev = get_cpu_device(cpu);
778
779 memset(uci, 0, sizeof(*uci));
780
781 microcode_ops->collect_cpu_info(cpu, &uci->cpu_sig);
782 cpu_data(cpu).microcode = uci->cpu_sig.rev;
783 if (!cpu)
784 boot_cpu_data.microcode = uci->cpu_sig.rev;
785
786 if (sysfs_create_group(&dev->kobj, &mc_attr_group))
787 pr_err("Failed to create group for CPU%d\n", cpu);
788 return 0;
789}
790
791static int mc_cpu_down_prep(unsigned int cpu)
792{
793 struct device *dev = get_cpu_device(cpu);
794
795 microcode_fini_cpu(cpu);
796 sysfs_remove_group(&dev->kobj, &mc_attr_group);
797 return 0;
798}
799
800static struct attribute *cpu_root_microcode_attrs[] = {
801#ifdef CONFIG_MICROCODE_LATE_LOADING
802 &dev_attr_reload.attr,
803#endif
804 NULL
805};
806
807static const struct attribute_group cpu_root_microcode_group = {
808 .name = "microcode",
809 .attrs = cpu_root_microcode_attrs,
810};
811
812static int __init microcode_init(void)
813{
814 struct device *dev_root;
815 struct cpuinfo_x86 *c = &boot_cpu_data;
816 int error;
817
818 if (dis_ucode_ldr)
819 return -EINVAL;
820
821 if (c->x86_vendor == X86_VENDOR_INTEL)
822 microcode_ops = init_intel_microcode();
823 else if (c->x86_vendor == X86_VENDOR_AMD)
824 microcode_ops = init_amd_microcode();
825 else
826 pr_err("no support for this CPU vendor\n");
827
828 if (!microcode_ops)
829 return -ENODEV;
830
831 pr_info_once("Current revision: 0x%08x\n", (early_data.new_rev ?: early_data.old_rev));
832
833 if (early_data.new_rev)
834 pr_info_once("Updated early from: 0x%08x\n", early_data.old_rev);
835
836 microcode_pdev = platform_device_register_simple("microcode", -1, NULL, 0);
837 if (IS_ERR(microcode_pdev))
838 return PTR_ERR(microcode_pdev);
839
840 dev_root = bus_get_dev_root(&cpu_subsys);
841 if (dev_root) {
842 error = sysfs_create_group(&dev_root->kobj, &cpu_root_microcode_group);
843 put_device(dev_root);
844 if (error) {
845 pr_err("Error creating microcode group!\n");
846 goto out_pdev;
847 }
848 }
849
850 register_syscore_ops(&mc_syscore_ops);
851 cpuhp_setup_state(CPUHP_AP_ONLINE_DYN, "x86/microcode:online",
852 mc_cpu_online, mc_cpu_down_prep);
853
854 return 0;
855
856 out_pdev:
857 platform_device_unregister(microcode_pdev);
858 return error;
859
860}
861late_initcall(microcode_init);
1/*
2 * Intel CPU Microcode Update Driver for Linux
3 *
4 * Copyright (C) 2000-2006 Tigran Aivazian <tigran@aivazian.fsnet.co.uk>
5 * 2006 Shaohua Li <shaohua.li@intel.com>
6 *
7 * This driver allows to upgrade microcode on Intel processors
8 * belonging to IA-32 family - PentiumPro, Pentium II,
9 * Pentium III, Xeon, Pentium 4, etc.
10 *
11 * Reference: Section 8.11 of Volume 3a, IA-32 Intel? Architecture
12 * Software Developer's Manual
13 * Order Number 253668 or free download from:
14 *
15 * http://developer.intel.com/Assets/PDF/manual/253668.pdf
16 *
17 * For more information, go to http://www.urbanmyth.org/microcode
18 *
19 * This program is free software; you can redistribute it and/or
20 * modify it under the terms of the GNU General Public License
21 * as published by the Free Software Foundation; either version
22 * 2 of the License, or (at your option) any later version.
23 *
24 * 1.0 16 Feb 2000, Tigran Aivazian <tigran@sco.com>
25 * Initial release.
26 * 1.01 18 Feb 2000, Tigran Aivazian <tigran@sco.com>
27 * Added read() support + cleanups.
28 * 1.02 21 Feb 2000, Tigran Aivazian <tigran@sco.com>
29 * Added 'device trimming' support. open(O_WRONLY) zeroes
30 * and frees the saved copy of applied microcode.
31 * 1.03 29 Feb 2000, Tigran Aivazian <tigran@sco.com>
32 * Made to use devfs (/dev/cpu/microcode) + cleanups.
33 * 1.04 06 Jun 2000, Simon Trimmer <simon@veritas.com>
34 * Added misc device support (now uses both devfs and misc).
35 * Added MICROCODE_IOCFREE ioctl to clear memory.
36 * 1.05 09 Jun 2000, Simon Trimmer <simon@veritas.com>
37 * Messages for error cases (non Intel & no suitable microcode).
38 * 1.06 03 Aug 2000, Tigran Aivazian <tigran@veritas.com>
39 * Removed ->release(). Removed exclusive open and status bitmap.
40 * Added microcode_rwsem to serialize read()/write()/ioctl().
41 * Removed global kernel lock usage.
42 * 1.07 07 Sep 2000, Tigran Aivazian <tigran@veritas.com>
43 * Write 0 to 0x8B msr and then cpuid before reading revision,
44 * so that it works even if there were no update done by the
45 * BIOS. Otherwise, reading from 0x8B gives junk (which happened
46 * to be 0 on my machine which is why it worked even when I
47 * disabled update by the BIOS)
48 * Thanks to Eric W. Biederman <ebiederman@lnxi.com> for the fix.
49 * 1.08 11 Dec 2000, Richard Schaal <richard.schaal@intel.com> and
50 * Tigran Aivazian <tigran@veritas.com>
51 * Intel Pentium 4 processor support and bugfixes.
52 * 1.09 30 Oct 2001, Tigran Aivazian <tigran@veritas.com>
53 * Bugfix for HT (Hyper-Threading) enabled processors
54 * whereby processor resources are shared by all logical processors
55 * in a single CPU package.
56 * 1.10 28 Feb 2002 Asit K Mallick <asit.k.mallick@intel.com> and
57 * Tigran Aivazian <tigran@veritas.com>,
58 * Serialize updates as required on HT processors due to
59 * speculative nature of implementation.
60 * 1.11 22 Mar 2002 Tigran Aivazian <tigran@veritas.com>
61 * Fix the panic when writing zero-length microcode chunk.
62 * 1.12 29 Sep 2003 Nitin Kamble <nitin.a.kamble@intel.com>,
63 * Jun Nakajima <jun.nakajima@intel.com>
64 * Support for the microcode updates in the new format.
65 * 1.13 10 Oct 2003 Tigran Aivazian <tigran@veritas.com>
66 * Removed ->read() method and obsoleted MICROCODE_IOCFREE ioctl
67 * because we no longer hold a copy of applied microcode
68 * in kernel memory.
69 * 1.14 25 Jun 2004 Tigran Aivazian <tigran@veritas.com>
70 * Fix sigmatch() macro to handle old CPUs with pf == 0.
71 * Thanks to Stuart Swales for pointing out this bug.
72 */
73
74#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
75
76#include <linux/platform_device.h>
77#include <linux/miscdevice.h>
78#include <linux/capability.h>
79#include <linux/kernel.h>
80#include <linux/module.h>
81#include <linux/mutex.h>
82#include <linux/cpu.h>
83#include <linux/fs.h>
84#include <linux/mm.h>
85#include <linux/syscore_ops.h>
86
87#include <asm/microcode.h>
88#include <asm/processor.h>
89#include <asm/cpu_device_id.h>
90#include <asm/perf_event.h>
91
92MODULE_DESCRIPTION("Microcode Update Driver");
93MODULE_AUTHOR("Tigran Aivazian <tigran@aivazian.fsnet.co.uk>");
94MODULE_LICENSE("GPL");
95
96#define MICROCODE_VERSION "2.00"
97
98static struct microcode_ops *microcode_ops;
99
100/*
101 * Synchronization.
102 *
103 * All non cpu-hotplug-callback call sites use:
104 *
105 * - microcode_mutex to synchronize with each other;
106 * - get/put_online_cpus() to synchronize with
107 * the cpu-hotplug-callback call sites.
108 *
109 * We guarantee that only a single cpu is being
110 * updated at any particular moment of time.
111 */
112static DEFINE_MUTEX(microcode_mutex);
113
114struct ucode_cpu_info ucode_cpu_info[NR_CPUS];
115EXPORT_SYMBOL_GPL(ucode_cpu_info);
116
117/*
118 * Operations that are run on a target cpu:
119 */
120
121struct cpu_info_ctx {
122 struct cpu_signature *cpu_sig;
123 int err;
124};
125
126static void collect_cpu_info_local(void *arg)
127{
128 struct cpu_info_ctx *ctx = arg;
129
130 ctx->err = microcode_ops->collect_cpu_info(smp_processor_id(),
131 ctx->cpu_sig);
132}
133
134static int collect_cpu_info_on_target(int cpu, struct cpu_signature *cpu_sig)
135{
136 struct cpu_info_ctx ctx = { .cpu_sig = cpu_sig, .err = 0 };
137 int ret;
138
139 ret = smp_call_function_single(cpu, collect_cpu_info_local, &ctx, 1);
140 if (!ret)
141 ret = ctx.err;
142
143 return ret;
144}
145
146static int collect_cpu_info(int cpu)
147{
148 struct ucode_cpu_info *uci = ucode_cpu_info + cpu;
149 int ret;
150
151 memset(uci, 0, sizeof(*uci));
152
153 ret = collect_cpu_info_on_target(cpu, &uci->cpu_sig);
154 if (!ret)
155 uci->valid = 1;
156
157 return ret;
158}
159
160struct apply_microcode_ctx {
161 int err;
162};
163
164static void apply_microcode_local(void *arg)
165{
166 struct apply_microcode_ctx *ctx = arg;
167
168 ctx->err = microcode_ops->apply_microcode(smp_processor_id());
169}
170
171static int apply_microcode_on_target(int cpu)
172{
173 struct apply_microcode_ctx ctx = { .err = 0 };
174 int ret;
175
176 ret = smp_call_function_single(cpu, apply_microcode_local, &ctx, 1);
177 if (!ret)
178 ret = ctx.err;
179
180 return ret;
181}
182
183#ifdef CONFIG_MICROCODE_OLD_INTERFACE
184static int do_microcode_update(const void __user *buf, size_t size)
185{
186 int error = 0;
187 int cpu;
188
189 for_each_online_cpu(cpu) {
190 struct ucode_cpu_info *uci = ucode_cpu_info + cpu;
191 enum ucode_state ustate;
192
193 if (!uci->valid)
194 continue;
195
196 ustate = microcode_ops->request_microcode_user(cpu, buf, size);
197 if (ustate == UCODE_ERROR) {
198 error = -1;
199 break;
200 } else if (ustate == UCODE_OK)
201 apply_microcode_on_target(cpu);
202 }
203
204 return error;
205}
206
207static int microcode_open(struct inode *inode, struct file *file)
208{
209 return capable(CAP_SYS_RAWIO) ? nonseekable_open(inode, file) : -EPERM;
210}
211
212static ssize_t microcode_write(struct file *file, const char __user *buf,
213 size_t len, loff_t *ppos)
214{
215 ssize_t ret = -EINVAL;
216
217 if ((len >> PAGE_SHIFT) > totalram_pages) {
218 pr_err("too much data (max %ld pages)\n", totalram_pages);
219 return ret;
220 }
221
222 get_online_cpus();
223 mutex_lock(µcode_mutex);
224
225 if (do_microcode_update(buf, len) == 0)
226 ret = (ssize_t)len;
227
228 if (ret > 0)
229 perf_check_microcode();
230
231 mutex_unlock(µcode_mutex);
232 put_online_cpus();
233
234 return ret;
235}
236
237static const struct file_operations microcode_fops = {
238 .owner = THIS_MODULE,
239 .write = microcode_write,
240 .open = microcode_open,
241 .llseek = no_llseek,
242};
243
244static struct miscdevice microcode_dev = {
245 .minor = MICROCODE_MINOR,
246 .name = "microcode",
247 .nodename = "cpu/microcode",
248 .fops = µcode_fops,
249};
250
251static int __init microcode_dev_init(void)
252{
253 int error;
254
255 error = misc_register(µcode_dev);
256 if (error) {
257 pr_err("can't misc_register on minor=%d\n", MICROCODE_MINOR);
258 return error;
259 }
260
261 return 0;
262}
263
264static void __exit microcode_dev_exit(void)
265{
266 misc_deregister(µcode_dev);
267}
268
269MODULE_ALIAS_MISCDEV(MICROCODE_MINOR);
270MODULE_ALIAS("devname:cpu/microcode");
271#else
272#define microcode_dev_init() 0
273#define microcode_dev_exit() do { } while (0)
274#endif
275
276/* fake device for request_firmware */
277static struct platform_device *microcode_pdev;
278
279static int reload_for_cpu(int cpu)
280{
281 struct ucode_cpu_info *uci = ucode_cpu_info + cpu;
282 enum ucode_state ustate;
283 int err = 0;
284
285 if (!uci->valid)
286 return err;
287
288 ustate = microcode_ops->request_microcode_fw(cpu, µcode_pdev->dev, true);
289 if (ustate == UCODE_OK)
290 apply_microcode_on_target(cpu);
291 else
292 if (ustate == UCODE_ERROR)
293 err = -EINVAL;
294 return err;
295}
296
297static ssize_t reload_store(struct device *dev,
298 struct device_attribute *attr,
299 const char *buf, size_t size)
300{
301 unsigned long val;
302 int cpu;
303 ssize_t ret = 0, tmp_ret;
304
305 ret = kstrtoul(buf, 0, &val);
306 if (ret)
307 return ret;
308
309 if (val != 1)
310 return size;
311
312 get_online_cpus();
313 mutex_lock(µcode_mutex);
314 for_each_online_cpu(cpu) {
315 tmp_ret = reload_for_cpu(cpu);
316 if (tmp_ret != 0)
317 pr_warn("Error reloading microcode on CPU %d\n", cpu);
318
319 /* save retval of the first encountered reload error */
320 if (!ret)
321 ret = tmp_ret;
322 }
323 if (!ret)
324 perf_check_microcode();
325 mutex_unlock(µcode_mutex);
326 put_online_cpus();
327
328 if (!ret)
329 ret = size;
330
331 return ret;
332}
333
334static ssize_t version_show(struct device *dev,
335 struct device_attribute *attr, char *buf)
336{
337 struct ucode_cpu_info *uci = ucode_cpu_info + dev->id;
338
339 return sprintf(buf, "0x%x\n", uci->cpu_sig.rev);
340}
341
342static ssize_t pf_show(struct device *dev,
343 struct device_attribute *attr, char *buf)
344{
345 struct ucode_cpu_info *uci = ucode_cpu_info + dev->id;
346
347 return sprintf(buf, "0x%x\n", uci->cpu_sig.pf);
348}
349
350static DEVICE_ATTR(reload, 0200, NULL, reload_store);
351static DEVICE_ATTR(version, 0400, version_show, NULL);
352static DEVICE_ATTR(processor_flags, 0400, pf_show, NULL);
353
354static struct attribute *mc_default_attrs[] = {
355 &dev_attr_version.attr,
356 &dev_attr_processor_flags.attr,
357 NULL
358};
359
360static struct attribute_group mc_attr_group = {
361 .attrs = mc_default_attrs,
362 .name = "microcode",
363};
364
365static void microcode_fini_cpu(int cpu)
366{
367 microcode_ops->microcode_fini_cpu(cpu);
368}
369
370static enum ucode_state microcode_resume_cpu(int cpu)
371{
372 pr_debug("CPU%d updated upon resume\n", cpu);
373
374 if (apply_microcode_on_target(cpu))
375 return UCODE_ERROR;
376
377 return UCODE_OK;
378}
379
380static enum ucode_state microcode_init_cpu(int cpu, bool refresh_fw)
381{
382 enum ucode_state ustate;
383 struct ucode_cpu_info *uci = ucode_cpu_info + cpu;
384
385 if (uci && uci->valid)
386 return UCODE_OK;
387
388 if (collect_cpu_info(cpu))
389 return UCODE_ERROR;
390
391 /* --dimm. Trigger a delayed update? */
392 if (system_state != SYSTEM_RUNNING)
393 return UCODE_NFOUND;
394
395 ustate = microcode_ops->request_microcode_fw(cpu, µcode_pdev->dev,
396 refresh_fw);
397
398 if (ustate == UCODE_OK) {
399 pr_debug("CPU%d updated upon init\n", cpu);
400 apply_microcode_on_target(cpu);
401 }
402
403 return ustate;
404}
405
406static enum ucode_state microcode_update_cpu(int cpu)
407{
408 struct ucode_cpu_info *uci = ucode_cpu_info + cpu;
409
410 if (uci->valid)
411 return microcode_resume_cpu(cpu);
412
413 return microcode_init_cpu(cpu, false);
414}
415
416static int mc_device_add(struct device *dev, struct subsys_interface *sif)
417{
418 int err, cpu = dev->id;
419
420 if (!cpu_online(cpu))
421 return 0;
422
423 pr_debug("CPU%d added\n", cpu);
424
425 err = sysfs_create_group(&dev->kobj, &mc_attr_group);
426 if (err)
427 return err;
428
429 if (microcode_init_cpu(cpu, true) == UCODE_ERROR)
430 return -EINVAL;
431
432 return err;
433}
434
435static int mc_device_remove(struct device *dev, struct subsys_interface *sif)
436{
437 int cpu = dev->id;
438
439 if (!cpu_online(cpu))
440 return 0;
441
442 pr_debug("CPU%d removed\n", cpu);
443 microcode_fini_cpu(cpu);
444 sysfs_remove_group(&dev->kobj, &mc_attr_group);
445 return 0;
446}
447
448static struct subsys_interface mc_cpu_interface = {
449 .name = "microcode",
450 .subsys = &cpu_subsys,
451 .add_dev = mc_device_add,
452 .remove_dev = mc_device_remove,
453};
454
455/**
456 * mc_bp_resume - Update boot CPU microcode during resume.
457 */
458static void mc_bp_resume(void)
459{
460 int cpu = smp_processor_id();
461 struct ucode_cpu_info *uci = ucode_cpu_info + cpu;
462
463 if (uci->valid && uci->mc)
464 microcode_ops->apply_microcode(cpu);
465}
466
467static struct syscore_ops mc_syscore_ops = {
468 .resume = mc_bp_resume,
469};
470
471static int
472mc_cpu_callback(struct notifier_block *nb, unsigned long action, void *hcpu)
473{
474 unsigned int cpu = (unsigned long)hcpu;
475 struct device *dev;
476
477 dev = get_cpu_device(cpu);
478
479 switch (action & ~CPU_TASKS_FROZEN) {
480 case CPU_ONLINE:
481 microcode_update_cpu(cpu);
482 pr_debug("CPU%d added\n", cpu);
483 /*
484 * "break" is missing on purpose here because we want to fall
485 * through in order to create the sysfs group.
486 */
487
488 case CPU_DOWN_FAILED:
489 if (sysfs_create_group(&dev->kobj, &mc_attr_group))
490 pr_err("Failed to create group for CPU%d\n", cpu);
491 break;
492
493 case CPU_DOWN_PREPARE:
494 /* Suspend is in progress, only remove the interface */
495 sysfs_remove_group(&dev->kobj, &mc_attr_group);
496 pr_debug("CPU%d removed\n", cpu);
497 break;
498
499 /*
500 * case CPU_DEAD:
501 *
502 * When a CPU goes offline, don't free up or invalidate the copy of
503 * the microcode in kernel memory, so that we can reuse it when the
504 * CPU comes back online without unnecessarily requesting the userspace
505 * for it again.
506 */
507 }
508
509 /* The CPU refused to come up during a system resume */
510 if (action == CPU_UP_CANCELED_FROZEN)
511 microcode_fini_cpu(cpu);
512
513 return NOTIFY_OK;
514}
515
516static struct notifier_block __refdata mc_cpu_notifier = {
517 .notifier_call = mc_cpu_callback,
518};
519
520#ifdef MODULE
521/* Autoload on Intel and AMD systems */
522static const struct x86_cpu_id __initconst microcode_id[] = {
523#ifdef CONFIG_MICROCODE_INTEL
524 { X86_VENDOR_INTEL, X86_FAMILY_ANY, X86_MODEL_ANY, },
525#endif
526#ifdef CONFIG_MICROCODE_AMD
527 { X86_VENDOR_AMD, X86_FAMILY_ANY, X86_MODEL_ANY, },
528#endif
529 {}
530};
531MODULE_DEVICE_TABLE(x86cpu, microcode_id);
532#endif
533
534static struct attribute *cpu_root_microcode_attrs[] = {
535 &dev_attr_reload.attr,
536 NULL
537};
538
539static struct attribute_group cpu_root_microcode_group = {
540 .name = "microcode",
541 .attrs = cpu_root_microcode_attrs,
542};
543
544static int __init microcode_init(void)
545{
546 struct cpuinfo_x86 *c = &cpu_data(0);
547 int error;
548
549 if (c->x86_vendor == X86_VENDOR_INTEL)
550 microcode_ops = init_intel_microcode();
551 else if (c->x86_vendor == X86_VENDOR_AMD)
552 microcode_ops = init_amd_microcode();
553 else
554 pr_err("no support for this CPU vendor\n");
555
556 if (!microcode_ops)
557 return -ENODEV;
558
559 microcode_pdev = platform_device_register_simple("microcode", -1,
560 NULL, 0);
561 if (IS_ERR(microcode_pdev))
562 return PTR_ERR(microcode_pdev);
563
564 get_online_cpus();
565 mutex_lock(µcode_mutex);
566
567 error = subsys_interface_register(&mc_cpu_interface);
568 if (!error)
569 perf_check_microcode();
570 mutex_unlock(µcode_mutex);
571 put_online_cpus();
572
573 if (error)
574 goto out_pdev;
575
576 error = sysfs_create_group(&cpu_subsys.dev_root->kobj,
577 &cpu_root_microcode_group);
578
579 if (error) {
580 pr_err("Error creating microcode group!\n");
581 goto out_driver;
582 }
583
584 error = microcode_dev_init();
585 if (error)
586 goto out_ucode_group;
587
588 register_syscore_ops(&mc_syscore_ops);
589 register_hotcpu_notifier(&mc_cpu_notifier);
590
591 pr_info("Microcode Update Driver: v" MICROCODE_VERSION
592 " <tigran@aivazian.fsnet.co.uk>, Peter Oruba\n");
593
594 return 0;
595
596 out_ucode_group:
597 sysfs_remove_group(&cpu_subsys.dev_root->kobj,
598 &cpu_root_microcode_group);
599
600 out_driver:
601 get_online_cpus();
602 mutex_lock(µcode_mutex);
603
604 subsys_interface_unregister(&mc_cpu_interface);
605
606 mutex_unlock(µcode_mutex);
607 put_online_cpus();
608
609 out_pdev:
610 platform_device_unregister(microcode_pdev);
611 return error;
612
613}
614module_init(microcode_init);
615
616static void __exit microcode_exit(void)
617{
618 struct cpuinfo_x86 *c = &cpu_data(0);
619
620 microcode_dev_exit();
621
622 unregister_hotcpu_notifier(&mc_cpu_notifier);
623 unregister_syscore_ops(&mc_syscore_ops);
624
625 sysfs_remove_group(&cpu_subsys.dev_root->kobj,
626 &cpu_root_microcode_group);
627
628 get_online_cpus();
629 mutex_lock(µcode_mutex);
630
631 subsys_interface_unregister(&mc_cpu_interface);
632
633 mutex_unlock(µcode_mutex);
634 put_online_cpus();
635
636 platform_device_unregister(microcode_pdev);
637
638 microcode_ops = NULL;
639
640 if (c->x86_vendor == X86_VENDOR_AMD)
641 exit_amd_microcode();
642
643 pr_info("Microcode Update Driver: v" MICROCODE_VERSION " removed.\n");
644}
645module_exit(microcode_exit);