KVM: VMX: Include MKTME KeyID bits in shadow_zero_check

Browse source

Intel MKTME KeyID bits (including Intel TDX private KeyID bits) should
never be set to SPTE.  Set shadow_me_value to 0 and shadow_me_mask to
include all MKTME KeyID bits to include them to shadow_zero_check.

Signed-off-by: Kai Huang <kai.huang@intel.com>
Message-Id: <27bc10e97a3c0b58a4105ff9107448c190328239.1650363789.git.kai.huang@intel.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

...

This commit is contained in:

Kai Huang 2022-04-19 23:17:04 +12:00 • committed by Paolo Bonzini

parent e54f1ff244

commit 3c5c32457d

3 changed files with 50 additions and 19 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

19

arch/x86/kvm/mmu.h

View file

19

arch/x86/kvm/mmu/spte.c

View file

31

arch/x86/kvm/vmx/vmx.c

View file