Messages in this thread | | | Date | Fri, 27 May 2022 17:06:56 +0000 | Subject | [PATCH v2 0/2] KVM: VMX: Sanitize VM-Entry/VM-Exit pairs during setup | From | Sean Christopherson <> |
| |
Sanitize the VM-Entry/VM-Exit load+load and load+clear pairs when kvm_intel is loaded instead of checking both controls at runtime. Not sanitizing means KVM ends up setting non-dynamic bits in the VMCS.
Add an on-by-default knob to reject kvm_intel if an inconsistent VMCS config is detected instead of using a degraded and/or potentially broken setup.
v2: - Drop the macros. [Paolo] - Tweak the module param name to try to capture that KVM doesn't check for all possible inconsistencies. [Jim] - Enable the knob by default. [Paolo]
v1: https://lore.kernel.org/all/20220525210447.2758436-1-seanjc@google.com
Sean Christopherson (2): KVM: VMX: Sanitize VM-Entry/VM-Exit control pairs at kvm_intel load time KVM: VMX: Reject kvm_intel if an inconsistent VMCS config is detected
arch/x86/kvm/vmx/capabilities.h | 13 +++------ arch/x86/kvm/vmx/vmx.c | 52 +++++++++++++++++++++++++++++++-- 2 files changed, 53 insertions(+), 12 deletions(-)
base-commit: 90bde5bea810d766e7046bf5884f2ccf76dd78e9 -- 2.36.1.255.ge46751e96f-goog
| |