lkml.org 
[lkml]   [2022]   [May]   [27]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
Subject[PATCH v2 0/2] KVM: VMX: Sanitize VM-Entry/VM-Exit pairs during setup
From
Sanitize the VM-Entry/VM-Exit load+load and load+clear pairs when kvm_intel
is loaded instead of checking both controls at runtime. Not sanitizing
means KVM ends up setting non-dynamic bits in the VMCS.

Add an on-by-default knob to reject kvm_intel if an inconsistent VMCS
config is detected instead of using a degraded and/or potentially broken
setup.

v2:
- Drop the macros. [Paolo]
- Tweak the module param name to try to capture that KVM doesn't check
for all possible inconsistencies. [Jim]
- Enable the knob by default. [Paolo]

v1: https://lore.kernel.org/all/20220525210447.2758436-1-seanjc@google.com

Sean Christopherson (2):
KVM: VMX: Sanitize VM-Entry/VM-Exit control pairs at kvm_intel load
time
KVM: VMX: Reject kvm_intel if an inconsistent VMCS config is detected

arch/x86/kvm/vmx/capabilities.h | 13 +++------
arch/x86/kvm/vmx/vmx.c | 52 +++++++++++++++++++++++++++++++--
2 files changed, 53 insertions(+), 12 deletions(-)


base-commit: 90bde5bea810d766e7046bf5884f2ccf76dd78e9
--
2.36.1.255.ge46751e96f-goog

\
 
 \ /
  Last update: 2022-05-27 19:08    [W:0.043 / U:0.052 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site