iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/arch/x86/kvm
History
Tom Lendacky ad5b353240 KVM: SVM: Do not terminate SEV-ES guests on GHCB validation failure 
Currently, an SEV-ES guest is terminated if the validation of the VMGEXIT
exit code or exit parameters fails.

The VMGEXIT instruction can be issued from userspace, even though
userspace (likely) can't update the GHCB. To prevent userspace from being
able to kill the guest, return an error through the GHCB when validation
fails rather than terminating the guest. For cases where the GHCB can't be
updated (e.g. the GHCB can't be mapped, etc.), just return back to the
guest.

The new error codes are documented in the lasest update to the GHCB
specification.

Fixes: 291bd20d5d88 ("KVM: SVM: Add initial support for a VMGEXIT VMEXIT")
Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
Message-Id: <b57280b5562893e2616257ac9c2d4525a9aeeb42.1638471124.git.thomas.lendacky@amd.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2021-12-05 03:02:04 -05:00
..
mmu
KVM: x86/mmu: Retry page fault if root is invalidated by memslot update
2021-12-02 04:12:12 -05:00
svm
KVM: SVM: Do not terminate SEV-ES guests on GHCB validation failure
2021-12-05 03:02:04 -05:00
vmx
KVM: VMX: Set failure code in prepare_vmcs02()
2021-12-02 04:12:11 -05:00
cpuid.c
cpuid: kvm_find_kvm_cpuid_features() should be declared 'static'
2021-11-18 02:03:14 -05:00
cpuid.h
KVM: x86: Move reverse CPUID helpers to separate header file
2021-04-26 05:27:13 -04:00
debugfs.c
KVM: X86: Introduce mmu_rmaps_stat per-vm debugfs file
2021-08-20 16:06:11 -04:00
emulate.c
KVM/arm64 updates for Linux 5.16
2021-10-31 02:28:48 -04:00
fpu.h
KVM: x86: Move FPU register accessors into fpu.h
2021-06-17 13:09:24 -04:00
hyperv.c
KVM: x86: Assume a 64-bit hypercall for guests with protected state
2021-11-18 02:12:13 -05:00
hyperv.h
KVM: x86: Query vcpu->vcpu_idx directly and drop its accessor
2021-09-22 10:33:11 -04:00
i8254.c
KVM: x86: Migrate the PIT only if vcpu0 is migrated, not any BSP
2021-08-02 11:01:51 -04:00
i8254.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
i8259.c
x86: Fix typo s/ECLR/ELCR/ for the PIC register
2021-08-10 23:31:44 +02:00
ioapic.c
kvm: rename KVM_MAX_VCPU_ID to KVM_MAX_VCPU_IDS
2021-09-30 04:27:05 -04:00
ioapic.h
x86/kvm: remove unused ack_notifier callbacks
2021-11-18 07:05:57 -05:00
irq_comm.c
x86: Fix various typos in comments
2021-03-18 15:31:53 +01:00
irq.c
KVM: x86/xen: Add event channel interrupt vector upcall
2021-02-04 14:19:39 +00:00
irq.h
x86/kvm: remove unused ack_notifier callbacks
2021-11-18 07:05:57 -05:00
Kconfig
KVM: x86: add config for non-kvm users of page tracking
2021-10-01 03:44:57 -04:00
kvm_cache_regs.h
KVM: x86: Introduce KVM_GET_SREGS2 / KVM_SET_SREGS2
2021-06-17 13:09:47 -04:00
kvm_emulate.h
KVM: x86: Drop "pre_" from enter/leave_smm() helpers
2021-06-17 13:09:35 -04:00
kvm_onhyperv.c
KVM: x86: hyper-v: Move the remote TLB flush logic out of vmx
2021-06-17 13:09:36 -04:00
kvm_onhyperv.h
KVM: x86: hyper-v: Move the remote TLB flush logic out of vmx
2021-06-17 13:09:36 -04:00
lapic.c
KVM: x86: check PIR even for vCPUs with disabled APICv
2021-11-30 03:52:39 -05:00
lapic.h
KVM: x86: Rename kvm_lapic_enable_pv_eoi()
2021-11-11 10:56:22 -05:00
Makefile
KVM: stats: Add fd-based API to read binary stats data
2021-06-24 11:47:57 -04:00
mmu.h
KVM: X86: Don't unload MMU in kvm_vcpu_flush_tlb_guest()
2021-10-22 05:44:43 -04:00
mtrr.c
KVM: x86: Add helper to consolidate "raw" reserved GPA mask calculations
2021-02-04 09:27:30 -05:00
pmu.c
kvm: x86: Convert return type of *is_valid_rdpmc_ecx() to bool
2021-11-11 10:56:19 -05:00
pmu.h
kvm: x86: Convert return type of *is_valid_rdpmc_ecx() to bool
2021-11-11 10:56:19 -05:00
reverse_cpuid.h
KVM: SEV: Mask CPUID[0x8000001F].eax according to supported features
2021-04-26 05:27:15 -04:00
trace.h
KVM: x86: Get exit_reason as part of kvm_x86_ops.get_exit_info
2021-10-25 06:48:24 -04:00
tss.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
x86.c
KVM: ensure APICv is considered inactive if there is no APIC
2021-12-02 04:12:11 -05:00
x86.h
KVM: nVMX: Abide to KVM_REQ_TLB_FLUSH_GUEST request on nested vmentry/vmexit
2021-11-26 07:07:49 -05:00
xen.c
KVM: x86: Assume a 64-bit hypercall for guests with protected state
2021-11-18 02:12:13 -05:00
xen.h
KVM: xen: do not use struct gfn_to_hva_cache
2021-08-05 03:31:40 -04:00