KVM: SVM: Decrypt SEV VMSA in dump_vmcb() if debugging is enabled

Browse source

An SEV-ES/SEV-SNP VM save area (VMSA) can be decrypted if the guest
policy allows debugging. Update the dump_vmcb() routine to output
some of the SEV VMSA contents if possible. This can be useful for
debug purposes.

Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
Acked-by: Borislav Petkov (AMD) <bp@alien8.de>
Tested-by: Kim Phillips <kim.phillips@amd.com>
Link: https://lore.kernel.org/r/ea3b852c295b6f4b200925ed6b6e2c90d9475e71.1742477213.git.thomas.lendacky@amd.com
Signed-off-by: Sean Christopherson <seanjc@google.com>

...

This commit is contained in:

Tom Lendacky 2025-03-20 08:26:49 -05:00 • committed by Sean Christopherson

parent 309d28576f

commit 962e2b6152

3 changed files with 122 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

98

arch/x86/kvm/svm/sev.c

View file

13

arch/x86/kvm/svm/svm.c

View file

11

arch/x86/kvm/svm/svm.h

View file