KVM: arm64: Add PKVM_DISABLE_STAGE2_ON_PANIC

Browse source

On NVHE_EL2_DEBUG, when using pKVM, the host stage-2 is relaxed to grant
the kernel access to the stacktrace, hypervisor bug table and text to
symbolize addresses. This is unsafe for production. In preparation for
adding more debug options to NVHE_EL2_DEBUG, decouple the stage-2
relaxation into a separate option.

While at it, rename PROTECTED_NVHE_STACKTRACE into PKVM_STACKTRACE,
following the same naming scheme as PKVM_DISABLE_STAGE2_ON_PANIC.

Reviewed-by: Kalesh Singh <kaleshsingh@google.com>
Signed-off-by: Vincent Donnefort <vdonnefort@google.com>
Link: https://patch.msgid.link/20260309162516.2623589-20-vdonnefort@google.com
Signed-off-by: Marc Zyngier <maz@kernel.org>

...

This commit is contained in:

Vincent Donnefort 2026-03-09 16:25:05 +00:00 • committed by Marc Zyngier

parent a717943d8e

commit 9019e82c7e

5 changed files with 46 additions and 30 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

62

arch/arm64/kvm/Kconfig

View file

2

arch/arm64/kvm/handle_exit.c

View file

2

arch/arm64/kvm/hyp/nvhe/host.S

View file

6

arch/arm64/kvm/hyp/nvhe/stacktrace.c

View file

8

arch/arm64/kvm/stacktrace.c

View file