KVM: arm64: Eagerly restore host fpsimd/sve state in pKVM

Browse source

When running in protected mode we don't want to leak protected
guest state to the host, including whether a guest has used
fpsimd/sve. Therefore, eagerly restore the host state on guest
exit when running in protected mode, which happens only if the
guest has used fpsimd/sve.

Reviewed-by: Oliver Upton <oliver.upton@linux.dev>
Signed-off-by: Fuad Tabba <tabba@google.com>
Link: https://lore.kernel.org/r/20240603122852.3923848-7-tabba@google.com
Signed-off-by: Marc Zyngier <maz@kernel.org>

...

This commit is contained in:

Fuad Tabba 2024-06-03 13:28:48 +01:00 • committed by Marc Zyngier

parent 66d5b53e20

commit b5b9955617

4 changed files with 93 additions and 5 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

13

arch/arm64/kvm/hyp/include/hyp/switch.h

View file

67

arch/arm64/kvm/hyp/nvhe/hyp-main.c

View file

2

arch/arm64/kvm/hyp/nvhe/pkvm.c

View file

16

arch/arm64/kvm/hyp/nvhe/switch.c

View file