lkml.org 
[lkml]   [2023]   [Feb]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: [PATCH 0/2] KVM: x86: Propagate AMD-specific IBRS bits to guests
    Date
    Date:   Mon, 27 Feb 2023 22:40:21 +0100
    From: Borislav Petkov <bp@alien8.de>
    > On Mon, Feb 27, 2023 at 09:05:24PM +0000, Takahiro Itazuri wrote:
    > > VMMs retrieve supported CPUID features via KVM_GET_SUPPORTED_CPUID to
    > > construct CPUID information to be passed to KVM_SET_CPUID2. Most CPUID
    > > feature bits related to speculative attacks are propagated from host
    > > CPUID. But AMD processors have AMD-specific IBRS related bits in CPUID
    > > Fn8000_0008_EBX (ref: AMD64 Architecture Programmer's Manual Volume 3:
    > > General-Purpose and System Instructions) and some bits are not
    > > propagated to guests.
    > >
    > > Enable propagation of these bits to guests, so that VMMs don't have to
    > > enable them explicitly based on host CPUID.
    >
    > How hard is it for the VMMs to enable them?

    Actually it is not so hard. What VMMs need to do is:
    1. Get host CPUID value.
    2. Check if these bits are set.
    3. Modify the return value of KVM_GET_SUPPORTED_CPUID based on step 2.
    4. Pass it to KVM_SET_CPUID2.

    If these bits are propagated to guests same as other bits, VMMs can
    skip the above process.

    https://www.kernel.org/doc/Documentation/virtual/kvm/api.txt
    > This ioctl returns x86 cpuid features which are supported by both the
    > hardware and kvm in its default configuration. Userspace can use the
    > information returned by this ioctl to construct cpuid information (for
    > KVM_SET_CPUID2) that is consistent with hardware, kernel, and
    > userspace capabilities, and with user requirements (for example, the
    > user may wish to constrain cpuid to emulate older hardware, or for
    > feature consistency across a cluster).

    VMMs trust to some extent that KVM_GET_SUPPORTED_CPUID returns cpuid
    information consistent with hardware, although they should not for some
    leaves (like CPU topoligy). IMHO, propagating these bits without VMM
    actions would be helpful since guests come to know IBRS related
    information of processors by default and applies mitigations properly
    based on that information.

    Best regards,
    Takahiro Itazuri

    \
     
     \ /
      Last update: 2023-03-27 00:38    [W:2.446 / U:0.084 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site