L1TF

[Shawn]

Hi guys,

Some of you might already noticed the new side-channel attack called
L1 Terminal Fault is made public late:

https://software.intel.com/security-software-guidance/software-guidance/l1-t...
https://software.intel.com/security-software-guidance/insights/deep-dive-int...

According to the vulnerability analysis, the SMM is affected by L1TF.
Since SMM code base in coreboot is much smaller than OEM's firmware,
IMOHO L1TF is not practical on coreboot. Any idea about is coreboot
vulnerable to L1TF?