Marc Zyngier e7afadd0db KVM: arm64: Ensure I-cache isolation between vcpus of a same VM ... Commit 01dc9262ff upstream. It recently became apparent that the ARMv8 architecture has interesting rules regarding attributes being used when fetching instructions if the MMU is off at Stage-1. In this situation, the CPU is allowed to fetch from the PoC and allocate into the I-cache (unless the memory is mapped with the XN attribute at Stage-2). If we transpose this to vcpus sharing a single physical CPU, it is possible for a vcpu running with its MMU off to influence another vcpu running with its MMU on, as the latter is expected to fetch from the PoU (and self-patching code doesn't flush below that level). In order to solve this, reuse the vcpu-private TLB invalidation code to apply the same policy to the I-cache, nuking it every time the vcpu runs on a physical CPU that ran another vcpu of the same VM in the past. This involve renaming __kvm_tlb_flush_local_vmid() to __kvm_flush_cpu_context(), and inserting a local i-cache invalidation there. Cc: stable@vger.kernel.org Signed-off-by: Marc Zyngier <maz@kernel.org> Acked-by: Will Deacon <will@kernel.org> Acked-by: Catalin Marinas <catalin.marinas@arm.com> Link: https://lore.kernel.org/r/20210303164505.68492-1-maz@kernel.org Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-03-17 17:06:37 +01:00
..
boot	Revert "arm64: dts: amlogic: add missing ethernet reset ID"	2021-03-09 11:11:15 +01:00
configs	arm64: defconfig: Build in CONFIG_GPIO_MXC by default	2020-10-26 15:48:58 +08:00
crypto	crypto: arm64/sha - add missing module aliases	2021-03-04 11:38:31 +01:00
include	KVM: arm64: Ensure I-cache isolation between vcpus of a same VM	2021-03-17 17:06:37 +01:00
kernel	arm64: mm: use a 48-bit ID map when possible on 52-bit VA builds	2021-03-17 17:06:34 +01:00
kvm	KVM: arm64: Ensure I-cache isolation between vcpus of a same VM	2021-03-17 17:06:37 +01:00
lib	arm64: Change .weak to SYM_FUNC_START_WEAK_PI for arch/arm64/lib/mem*.S	2020-10-30 08:32:31 +00:00
mm	arm64: mm: use a 48-bit ID map when possible on 52-bit VA builds	2021-03-17 17:06:34 +01:00
net	arm64: bpf: Fix branch offset in JIT	2020-09-17 12:05:36 +01:00
xen
Kbuild
Kconfig	arm64: Make CPU_BIG_ENDIAN depend on ld.bfd or ld.lld 13.0.0+	2021-03-11 14:17:22 +01:00
Kconfig.debug	arm64: remove TEXT_OFFSET randomization	2020-06-15 13:10:59 +01:00
Kconfig.platforms	arm64: berlin: Select DW_APB_TIMER_OF	2020-10-26 10:45:03 +01:00
Makefile	arm64: link with -z norelro for LLD or aarch64-elf	2021-01-12 20:18:24 +01:00