Messages in this thread | | | Date | Mon, 30 Jan 2023 15:00:52 +0300 | From | "Kirill A. Shutemov" <> | Subject | Re: Linux guest kernel threat model for Confidential Computing |
| |
On Mon, Jan 30, 2023 at 12:36:34PM +0100, Christophe de Dinechin wrote: > Is there for example anything that precludes TDX or SEV from executing > code in the bounce buffers?
In TDX, attempt to fetch instructions from shared memory (i.e. bounce buffer) will cause #GP, only data fetch is allowed. Page table also cannot be placed there and will cause the same #GP.
-- Kiryl Shutsemau / Kirill A. Shutemov
| |