Maxim Levitsky c7dfa40099 KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656) ... If L1 disables VMLOAD/VMSAVE intercepts, and doesn't enable Virtual VMLOAD/VMSAVE (currently not supported for the nested hypervisor), then VMLOAD/VMSAVE must operate on the L1 physical memory, which is only possible by making L0 intercept these instructions. Failure to do so allowed the nested guest to run VMLOAD/VMSAVE unintercepted, and thus read/write portions of the host physical memory. Fixes: 89c8a4984f ("KVM: SVM: Enable Virtual VMLOAD VMSAVE feature") Suggested-by: Paolo Bonzini <pbonzini@redhat.com> Signed-off-by: Maxim Levitsky <mlevitsk@redhat.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		2021-08-16 09:48:37 -04:00
..
mmu	KVM: x86/mmu: Protect marking SPs unsync when using TDP MMU with spinlock	2021-08-13 03:32:14 -04:00
svm	KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656)	2021-08-16 09:48:37 -04:00
vmx	KVM: nVMX: Use vmx_need_pf_intercept() when deciding if L0 wants a #PF	2021-08-13 03:20:58 -04:00
cpuid.c	KVM: x86: Allow guest to set EFER.NX=1 on non-PAE 32-bit kernels	2021-08-13 03:20:17 -04:00
cpuid.h	KVM: x86: Move reverse CPUID helpers to separate header file	2021-04-26 05:27:13 -04:00
debugfs.c	KVM: nVMX: nSVM: Add a new VCPU statistic to show if VCPU is in guest mode	2021-06-17 13:09:36 -04:00
emulate.c	KVM: x86: Drop "pre_" from enter/leave_smm() helpers	2021-06-17 13:09:35 -04:00
fpu.h	KVM: x86: Move FPU register accessors into fpu.h	2021-06-17 13:09:24 -04:00
hyperv.c	KVM: x86: remove dead initialization	2021-08-13 03:20:18 -04:00
hyperv.h	KVM: x86: hyper-v: Introduce KVM_CAP_HYPERV_ENFORCE_CPUID	2021-06-17 13:09:38 -04:00
i8254.c	kvm: i8254: remove redundant assignment to pointer s	2020-06-11 12:35:18 -04:00
i8254.h
i8259.c	KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks	2020-01-27 19:59:37 +01:00
ioapic.c	x86/kvm: fix vcpu-id indexed array sizes	2021-07-27 16:58:59 -04:00
ioapic.h	x86/kvm: fix vcpu-id indexed array sizes	2021-07-27 16:58:59 -04:00
irq.c	KVM: x86/xen: Add event channel interrupt vector upcall	2021-02-04 14:19:39 +00:00
irq.h	kvm/x86: Remove redundant function implementations	2020-05-27 13:11:10 -04:00
irq_comm.c	x86: Fix various typos in comments	2021-03-18 15:31:53 +01:00
Kconfig	ARM:	2021-06-28 15:40:51 -07:00
kvm_cache_regs.h	KVM: x86: Introduce KVM_GET_SREGS2 / KVM_SET_SREGS2	2021-06-17 13:09:47 -04:00
kvm_emulate.h	KVM: x86: Drop "pre_" from enter/leave_smm() helpers	2021-06-17 13:09:35 -04:00
kvm_onhyperv.c	KVM: x86: hyper-v: Move the remote TLB flush logic out of vmx	2021-06-17 13:09:36 -04:00
kvm_onhyperv.h	KVM: x86: hyper-v: Move the remote TLB flush logic out of vmx	2021-06-17 13:09:36 -04:00
lapic.c	KVM: LAPIC: Keep stored TMCCT register value 0 after KVM_SET_LAPIC	2021-06-17 14:26:11 -04:00
lapic.h	KVM: x86: Add a return code to kvm_apic_accept_events	2021-06-17 13:09:31 -04:00
Makefile	KVM: stats: Add fd-based API to read binary stats data	2021-06-24 11:47:57 -04:00
mmu.h	KVM: x86/mmu: Get CR0.WP from MMU, not vCPU, in shadow page fault	2021-06-24 18:00:47 -04:00
mtrr.c	KVM: x86: Add helper to consolidate "raw" reserved GPA mask calculations	2021-02-04 09:27:30 -05:00
pmu.c	KVM: x86: use static calls to reduce kvm_x86_ops overhead	2021-02-04 05:27:30 -05:00
pmu.h	x86: Fix various typos in comments	2021-03-18 15:31:53 +01:00
reverse_cpuid.h	KVM: SEV: Mask CPUID[0x8000001F].eax according to supported features	2021-04-26 05:27:15 -04:00
trace.h	KVM: x86: Introduce trace_kvm_hv_hypercall_done()	2021-08-03 06:16:40 -04:00
tss.h
x86.c	KVM: x86: accept userspace interrupt only if no event is injected	2021-07-30 07:53:02 -04:00
x86.h	KVM: x86/mmu: Use MMU role_regs to get LA57, and drop vCPU LA57 helper	2021-06-24 18:00:45 -04:00
xen.c	KVM: x86: Rename GPR accessors to make mode-aware variants the defaults	2021-04-26 05:27:13 -04:00
xen.h	KVM: x86/xen: Add support for vCPU runstate information	2021-03-02 14:30:54 -05:00