iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/arch/x86/kvm
History
Maxim Levitsky c7dfa40099 KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656) 
If L1 disables VMLOAD/VMSAVE intercepts, and doesn't enable
Virtual VMLOAD/VMSAVE (currently not supported for the nested hypervisor),
then VMLOAD/VMSAVE must operate on the L1 physical memory, which is only
possible by making L0 intercept these instructions.

Failure to do so allowed the nested guest to run VMLOAD/VMSAVE unintercepted,
and thus read/write portions of the host physical memory.

Fixes: 89c8a4984fc9 ("KVM: SVM: Enable Virtual VMLOAD VMSAVE feature")

Suggested-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Maxim Levitsky <mlevitsk@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2021-08-16 09:48:37 -04:00
..
mmu
KVM: x86/mmu: Protect marking SPs unsync when using TDP MMU with spinlock
2021-08-13 03:32:14 -04:00
svm
KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656)
2021-08-16 09:48:37 -04:00
vmx
KVM: nVMX: Use vmx_need_pf_intercept() when deciding if L0 wants a #PF
2021-08-13 03:20:58 -04:00
cpuid.c
KVM: x86: Allow guest to set EFER.NX=1 on non-PAE 32-bit kernels
2021-08-13 03:20:17 -04:00
cpuid.h
KVM: x86: Move reverse CPUID helpers to separate header file
2021-04-26 05:27:13 -04:00
debugfs.c
KVM: nVMX: nSVM: Add a new VCPU statistic to show if VCPU is in guest mode
2021-06-17 13:09:36 -04:00
emulate.c
KVM: x86: Drop "pre_" from enter/leave_smm() helpers
2021-06-17 13:09:35 -04:00
fpu.h
KVM: x86: Move FPU register accessors into fpu.h
2021-06-17 13:09:24 -04:00
hyperv.c
KVM: x86: remove dead initialization
2021-08-13 03:20:18 -04:00
hyperv.h
KVM: x86: hyper-v: Introduce KVM_CAP_HYPERV_ENFORCE_CPUID
2021-06-17 13:09:38 -04:00
i8254.c
kvm: i8254: remove redundant assignment to pointer s
2020-06-11 12:35:18 -04:00
i8254.h
…
i8259.c
KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks
2020-01-27 19:59:37 +01:00
ioapic.c
x86/kvm: fix vcpu-id indexed array sizes
2021-07-27 16:58:59 -04:00
ioapic.h
x86/kvm: fix vcpu-id indexed array sizes
2021-07-27 16:58:59 -04:00
irq_comm.c
x86: Fix various typos in comments
2021-03-18 15:31:53 +01:00
irq.c
KVM: x86/xen: Add event channel interrupt vector upcall
2021-02-04 14:19:39 +00:00
irq.h
kvm/x86: Remove redundant function implementations
2020-05-27 13:11:10 -04:00
Kconfig
ARM:
2021-06-28 15:40:51 -07:00
kvm_cache_regs.h
KVM: x86: Introduce KVM_GET_SREGS2 / KVM_SET_SREGS2
2021-06-17 13:09:47 -04:00
kvm_emulate.h
KVM: x86: Drop "pre_" from enter/leave_smm() helpers
2021-06-17 13:09:35 -04:00
kvm_onhyperv.c
KVM: x86: hyper-v: Move the remote TLB flush logic out of vmx
2021-06-17 13:09:36 -04:00
kvm_onhyperv.h
KVM: x86: hyper-v: Move the remote TLB flush logic out of vmx
2021-06-17 13:09:36 -04:00
lapic.c
KVM: LAPIC: Keep stored TMCCT register value 0 after KVM_SET_LAPIC
2021-06-17 14:26:11 -04:00
lapic.h
KVM: x86: Add a return code to kvm_apic_accept_events
2021-06-17 13:09:31 -04:00
Makefile
KVM: stats: Add fd-based API to read binary stats data
2021-06-24 11:47:57 -04:00
mmu.h
KVM: x86/mmu: Get CR0.WP from MMU, not vCPU, in shadow page fault
2021-06-24 18:00:47 -04:00
mtrr.c
KVM: x86: Add helper to consolidate "raw" reserved GPA mask calculations
2021-02-04 09:27:30 -05:00
pmu.c
KVM: x86: use static calls to reduce kvm_x86_ops overhead
2021-02-04 05:27:30 -05:00
pmu.h
x86: Fix various typos in comments
2021-03-18 15:31:53 +01:00
reverse_cpuid.h
KVM: SEV: Mask CPUID[0x8000001F].eax according to supported features
2021-04-26 05:27:15 -04:00
trace.h
KVM: x86: Introduce trace_kvm_hv_hypercall_done()
2021-08-03 06:16:40 -04:00
tss.h
…
x86.c
KVM: x86: accept userspace interrupt only if no event is injected
2021-07-30 07:53:02 -04:00
x86.h
KVM: x86/mmu: Use MMU role_regs to get LA57, and drop vCPU LA57 helper
2021-06-24 18:00:45 -04:00
xen.c
KVM: x86: Rename GPR accessors to make mode-aware variants the defaults
2021-04-26 05:27:13 -04:00
xen.h
KVM: x86/xen: Add support for vCPU runstate information
2021-03-02 14:30:54 -05:00