linux

iv/linux

History

Mathias Krause fb509f76ac KVM: VMX: Make CR0.WP a guest owned bit

Guests like grsecurity that make heavy use of CR0.WP to implement kernel
level W^X will suffer from the implied VMEXITs.

With EPT there is no need to intercept a guest change of CR0.WP, so
simply make it a guest owned bit if we can do so.

This implies that a read of a guest's CR0.WP bit might need a VMREAD.
However, the only potentially affected user seems to be kvm_init_mmu()
which is a heavy operation to begin with. But also most callers already
cache the full value of CR0 anyway, so no additional VMREAD is needed.
The only exception is nested_vmx_load_cr3().

This change is VMX-specific, as SVM has no such fine grained control
register intercept control.

Suggested-by: Sean Christopherson <seanjc@google.com>
Signed-off-by: Mathias Krause <minipli@grsecurity.net>
Link: https://lore.kernel.org/r/20230322013731.102955-7-minipli@grsecurity.net
Co-developed-by: Sean Christopherson <seanjc@google.com>
Signed-off-by: Sean Christopherson <seanjc@google.com>

2023-03-22 07:47:26 -07:00

alpha

alpha: fix lazy-FPU mis(merged/applied/whatnot)

2023-03-06 20:13:49 -05:00

arc

- Daniel Verkamp has contributed a memfd series ("mm/memfd: add

2023-02-23 17:09:35 -08:00

arm

ARM: SoC fixes for 6.3, part 1

2023-02-27 10:09:40 -08:00

arm64

KVM: Change return type of kvm_arch_vm_ioctl() to "int"