]> www.infradead.org Git - users/jedix/linux-maple.git/commit
KVM: SVM: Disallow guest from changing userspace's MSR_AMD64_DE_CFG value
authorSean Christopherson <seanjc@google.com>
Fri, 2 Aug 2024 18:19:26 +0000 (11:19 -0700)
committerSean Christopherson <seanjc@google.com>
Thu, 22 Aug 2024 19:06:24 +0000 (12:06 -0700)
commit74a0e79df68a8042fb84fd7207e57b70722cf825
tree0bb69780737225ad578c2d35e68d6ac089dc6de4
parente0183a42e3bcd4c30eb95bb046c016023fdc01ce
KVM: SVM: Disallow guest from changing userspace's MSR_AMD64_DE_CFG value

Inject a #GP if the guest attempts to change MSR_AMD64_DE_CFG from its
*current* value, not if the guest attempts to write a value other than
KVM's set of supported bits.  As per the comment and the changelog of the
original code, the intent is to effectively make MSR_AMD64_DE_CFG read-
only for the guest.

Opportunistically use a more conventional equality check instead of an
exclusive-OR check to detect attempts to change bits.

Fixes: d1d93fa90f1a ("KVM: SVM: Add MSR-based feature support for serializing LFENCE")
Cc: Tom Lendacky <thomas.lendacky@amd.com>
Reviewed-by: Tom Lendacky <thomas.lendacky@amd.com>
Link: https://lore.kernel.org/r/20240802181935.292540-2-seanjc@google.com
Signed-off-by: Sean Christopherson <seanjc@google.com>
arch/x86/kvm/svm/svm.c