linux-kernel - [PATCH 0/2] KVM: nVMX: fixes to nested virt interrupt injection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Fri, 28 Jul 2017 09:03:08 +0200
From:   Paolo Bonzini <pbonzini@...hat.com>
To:     linux-kernel@...r.kernel.org, kvm@...r.kernel.org
Cc:     jmattson@...gle.com, wanpeng.li@...mail.com
Subject: [PATCH 0/2] KVM: nVMX: fixes to nested virt interrupt injection

With these two patches, KVM does not blindly pass the exit interruption
info and exit qualification from the vmcs02 and vmcs12 when injecting
an exception.  There were two spots where this was done, namely
nested_vmx_check_exception and vmx_inject_page_fault_nested.

Patch 1 avoids writing the vmcs02's VM_EXIT_INTR_ERROR_CODE field,
which as Jim noticed isn't possible on pre-Haswell machines, but
otherwise has no semantic effect.

Patch 2 is the actual bugfix.

Paolo Bonzini (2):
  KVM: nVMX: do not fill vm_exit_intr_error_code in prepare_vmcs12
  KVM: nVMX: fixes to nested virt interrupt injection

 arch/x86/kvm/svm.c |  10 ++++
 arch/x86/kvm/vmx.c | 133 +++++++++++++++++++++++++++++++++++++----------------
 2 files changed, 103 insertions(+), 40 deletions(-)

-- 
1.8.3.1