KVM: x86: handle missing MPX in nested virtualization

Browse source

When doing nested virtualization, we may be able to read BNDCFGS but
still not be allowed to write to GUEST_BNDCFGS in the VMCS.  Guard
writes to the field with vmx_mpx_supported(), and similarly hide the
MSR from userspace if the processor does not support the field.

We could work around this with the generic MSR save/load machinery,
but there is only a limited number of MSR save/load slots and it is
not really worthwhile to waste one for a scenario that should not
happen except in the nested virtualization case.

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

...

This commit is contained in:

Paolo Bonzini 2014-03-05 23:19:52 +01:00

parent 36be0b9deb

commit 93c4adc7af

4 changed files with 30 additions and 3 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

5

arch/x86/kvm/cpuid.c

View file

6

arch/x86/kvm/svm.c

View file

5

arch/x86/kvm/vmx.c

View file

17

arch/x86/kvm/x86.c

View file