Michael Kelley 50015dbdec x86/hyperv: Block root partition functionality in a Confidential VM
[ Upstream commit f8acb24aaf89fc46cd953229462ea8abe31b395f ]

Hyper-V should never specify a VM that is a Confidential VM and also
running in the root partition.  Nonetheless, explicitly block such a
combination to guard against a compromised Hyper-V maliciously trying to
exploit root partition functionality in a Confidential VM to expose
Confidential VM secrets. No known bug is being fixed, but the attack
surface for Confidential VMs on Hyper-V is reduced.

Signed-off-by: Michael Kelley <mikelley@microsoft.com>
Link: https://lore.kernel.org/r/1678894453-95392-1-git-send-email-mikelley@microsoft.com
Signed-off-by: Wei Liu <wei.liu@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-05-11 23:00:15 +09:00
..
2022-11-03 23:59:15 +09:00
2023-02-01 08:27:20 +01:00
2023-02-01 08:27:20 +01:00
2023-03-30 12:47:54 +02:00
2023-03-17 08:49:04 +01:00