Skip to content

Commit 7801929

Browse files
committed
test: Ignore REPTAR on Intel Sapphire Rapids
REPTAR is reported "vulnerable" inside guest on Intel Sapphire Rapids for the same reason as Intel Ice Lake (microcode versio not exposed to guests). Signed-off-by: Takahiro Itazuri <[email protected]>
1 parent e191eec commit 7801929

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

tests/integration_tests/security/test_vulnerabilities.py

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -85,7 +85,10 @@ def expected_vulnerabilities(self, cpu_template_name):
8585
Since we have a test on host and the exception in guest is not valid,
8686
we add a check to ignore this exception.
8787
"""
88-
if global_props.cpu_codename == "INTEL_ICELAKE" and cpu_template_name is None:
88+
if (
89+
global_props.cpu_codename in ["INTEL_ICELAKE", "INTEL_SAPPHIRE_RAPIDS"]
90+
and cpu_template_name is None
91+
):
8992
return {
9093
'{"NAME": "REPTAR", "CVE": "CVE-2023-23583", "VULNERABLE": true, "INFOS": "Your microcode is too old to mitigate the vulnerability"}'
9194
}

0 commit comments

Comments
 (0)