Dongxiao Xu c08800a56c KVM: VMX: disable SMEP feature when guest is in non-paging mode ...

SMEP is disabled if CPU is in non-paging mode in hardware.
However KVM always uses paging mode to emulate guest non-paging
mode with TDP. To emulate this behavior, SMEP needs to be manually
disabled when guest switches to non-paging mode.

We met an issue that, SMP Linux guest with recent kernel (enable
SMEP support, for example, 3.5.3) would crash with triple fault if
setting unrestricted_guest=0. This is because KVM uses an identity
mapping page table to emulate the non-paging mode, where the page
table is set with USER flag. If SMEP is still enabled in this case,
guest will meet unhandlable page fault and then crash.

Reviewed-by: Gleb Natapov <gleb@redhat.com>
Reviewed-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Dongxiao Xu <dongxiao.xu@intel.com>
Signed-off-by: Xiantao Zhang <xiantao.zhang@intel.com>
Signed-off-by: Marcelo Tosatti <mtosatti@redhat.com>

2013-02-05 23:28:07 -02:00

..

cpuid.c

KVM: x86: Make register state after reset conform to specification

2012-12-05 18:00:07 +02:00

cpuid.h

Merge tag 'kvm-3.8-1' of git://git.kernel.org/pub/scm/virt/kvm/kvm

2012-12-13 15:31:08 -08:00

emulate.c

KVM: x86 emulator: fix test_cc() build failure on i386

2013-01-27 11:09:38 +02:00

i8254.c

kvm: fix i8254 counter 0 wraparound

2012-12-18 11:12:38 +02:00

i8254.h

KVM: fold kvm_pit_timer into kvm_kpit_state

2012-08-01 00:21:07 -03:00

i8259.c

KVM: inject ExtINT interrupt before APIC interrupts

2012-12-13 23:05:21 -02:00

irq.c

x86, apicv: add virtual interrupt delivery support

2013-01-29 10:48:19 +02:00

irq.h

KVM: switch to symbolic name for irq_states size

2012-07-20 16:12:16 -03:00

Kconfig

KVM: Depend on HIGH_RES_TIMERS

2012-09-10 11:10:03 +03:00

kvm_cache_regs.h

KVM: MMU: Do not unconditionally read PDPTE from guest memory

2011-09-25 19:18:01 +03:00

lapic.c

x86, apicv: add virtual interrupt delivery support

2013-01-29 10:48:19 +02:00

lapic.h

x86, apicv: add virtual interrupt delivery support

2013-01-29 10:48:19 +02:00

Makefile

KVM: Remove internal timer abstraction

2012-08-01 00:21:06 -03:00

mmu_audit.c

KVM: do not release the error pfn

2012-08-06 16:04:57 +03:00

mmu.c

Revert "KVM: MMU: split kvm_mmu_free_page"

2013-02-05 22:47:39 -02:00

mmu.h

KVM: MMU: Optimize is_last_gpte()

2012-09-20 13:00:09 +03:00

mmutrace.h

KVM: mmu: remove unused trace event

2013-01-07 19:54:50 -02:00

paging_tmpl.h

KVM: MMU: drop superfluous is_present_gpte() check.

2013-02-04 23:24:28 -02:00

pmu.c

Merge branch 'queue' into next

2012-07-26 11:54:21 +03:00

svm.c

x86, apicv: add virtual interrupt delivery support

2013-01-29 10:48:19 +02:00

trace.h

KVM: x86: require matched TSC offsets for master clock

2012-11-27 23:29:15 -02:00

tss.h

…

vmx.c

KVM: VMX: disable SMEP feature when guest is in non-paging mode

2013-02-05 23:28:07 -02:00

x86.c

KVM: MMU: set base_role.nxe during mmu initialization.

2013-02-04 23:24:28 -02:00

x86.h

KVM: x86: Add code to track call origin for msr assignment

2012-11-30 18:26:12 -02:00