Pawan Gupta 43fb862de8 KVM/VMX: Move VERW closer to VMentry for MDS mitigation ... During VMentry VERW is executed to mitigate MDS. After VERW, any memory access like register push onto stack may put host data in MDS affected CPU buffers. A guest can then use MDS to sample host data. Although likelihood of secrets surviving in registers at current VERW callsite is less, but it can't be ruled out. Harden the MDS mitigation by moving the VERW mitigation late in VMentry path. Note that VERW for MMIO Stale Data mitigation is unchanged because of the complexity of per-guest conditional VERW which is not easy to handle that late in asm with no GPRs available. If the CPU is also affected by MDS, VERW is unconditionally executed late in asm regardless of guest having MMIO access. Signed-off-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com> Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com> Acked-by: Sean Christopherson <seanjc@google.com> Link: https://lore.kernel.org/all/20240213-delay-verw-v8-6-a6216d83edb7%40linux.intel.com		2024-02-19 16:31:59 -08:00
..
mmu	Generic:	2024-01-17 13:03:37 -08:00
svm	work around gcc bugs with 'asm goto' with outputs	2024-02-09 15:57:48 -08:00
vmx	KVM/VMX: Move VERW closer to VMentry for MDS mitigation	2024-02-19 16:31:59 -08:00
.gitignore	KVM: x86: use a separate asm-offsets.c file	2022-11-09 12:10:17 -05:00
cpuid.c	Generic:	2024-01-17 13:03:37 -08:00
cpuid.h	KVM: x86: Use KVM-governed feature framework to track "LAM enabled"	2023-11-28 17:54:09 -08:00
debugfs.c	LoongArch KVM changes for v6.8	2024-01-02 13:16:29 -05:00
emulate.c	KVM: x86: Introduce get_untagged_addr() in kvm_x86_ops and call it in emulator	2023-11-28 17:54:06 -08:00
fpu.h	KVM: x86: Move FPU register accessors into fpu.h	2021-06-17 13:09:24 -04:00
governed_features.h	KVM: x86: Use KVM-governed feature framework to track "LAM enabled"	2023-11-28 17:54:09 -08:00
hyperv.c	KVM: x86: Give a hint when Win2016 might fail to boot due to XSAVES erratum	2024-01-31 16:21:00 -05:00
hyperv.h	KVM: x86: Give a hint when Win2016 might fail to boot due to XSAVES erratum	2024-01-31 16:21:00 -05:00
i8254.c	KVM: x86: Unify pr_fmt to use module name for all KVM modules	2022-12-29 15:47:35 -05:00
i8254.h	KVM: x86: PIT: Preserve state of speaker port data bit	2022-06-08 13:06:20 -04:00
i8259.c	KVM: x86: Fix poll command	2023-06-01 13:44:13 -07:00
ioapic.c	KVM: x86/ioapic: Resample the pending state of an IRQ when unmasking	2023-03-27 10:13:28 -04:00
ioapic.h	x86/kvm: remove unused ack_notifier callbacks	2021-11-18 07:05:57 -05:00
irq_comm.c	KVM: x86: Make Hyper-V emulation optional	2023-12-07 09:34:57 -08:00
irq.c	KVM: x86/xen: Remove unneeded xen context from kvm_arch when !CONFIG_KVM_XEN	2023-12-07 09:33:42 -08:00
irq.h	x86/kvm: remove unused ack_notifier callbacks	2021-11-18 07:05:57 -05:00
Kconfig	KVM x86 misc changes for 6.8:	2024-01-08 08:10:04 -05:00
kvm_cache_regs.h	KVM: x86: Add helpers to query individual CR0/CR4 bits	2023-03-22 10:10:53 -07:00
kvm_emulate.h	KVM: x86: Introduce get_untagged_addr() in kvm_x86_ops and call it in emulator	2023-11-28 17:54:06 -08:00
kvm_onhyperv.c	KVM: x86/mmu: Move filling of Hyper-V's TLB range struct into Hyper-V code	2023-04-10 15:17:29 -07:00
kvm_onhyperv.h	KVM: x86: Move Hyper-V partition assist page out of Hyper-V emulation context	2023-12-07 09:34:01 -08:00
kvm-asm-offsets.c	KVM: SVM: move MSR_IA32_SPEC_CTRL save/restore to assembly	2022-11-09 12:25:53 -05:00
lapic.c	KVM: x86: Introduce helper to check if vector is set in Hyper-V SynIC	2023-12-07 09:34:14 -08:00
lapic.h	KVM: x86: Split out logic to generate "readable" APIC regs mask to helper	2023-01-24 10:04:35 -08:00
Makefile	KVM: x86: Make Hyper-V emulation optional	2023-12-07 09:34:57 -08:00
mmu.h	KVM: x86: Use KVM-governed feature framework to track "LAM enabled"	2023-11-28 17:54:09 -08:00
mtrr.c	KVM: x86/mmu: Zap SPTEs on MTRR update iff guest MTRRs are honored	2023-10-09 14:35:14 -07:00
pmu.c	KVM: x86/pmu: Track emulated counter events instead of previous counter	2023-11-30 12:52:55 -08:00
pmu.h	KVM: x86/pmu: Track emulated counter events instead of previous counter	2023-11-30 12:52:55 -08:00
reverse_cpuid.h	KVM: x86: Use a switch statement and macros in __feature_translate()	2023-11-30 12:27:02 -08:00
smm.c	KVM: x86: Remove redundant vcpu->arch.cr0 assignments	2023-09-27 12:57:48 -07:00
smm.h	KVM: x86: smm: preserve interrupt shadow in SMRAM	2022-11-09 12:31:26 -05:00
trace.h	KVM: x86/xen: Add CPL to Xen hypercall tracepoint	2022-11-28 13:31:01 -05:00
tss.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
x86.c	KVM selftests fixes/cleanups (and one KVM x86 cleanup) for 6.8:	2024-02-14 12:34:58 -05:00
x86.h	KVM: x86: Virtualize LAM for supervisor pointer	2023-11-28 17:54:07 -08:00
xen.c	Generic:	2024-01-17 13:03:37 -08:00
xen.h	KVM: x86/xen: update Xen CPUID Leaf 4 (tsc info) sub-leaves, if present	2023-01-24 10:05:20 -08:00