x86/sev: Check IOBM for IOIO exceptions from user-space

Browse source

Check the IO permission bitmap (if present) before emulating IOIO #VC
exceptions for user-space. These permissions are checked by hardware
already before the #VC is raised, but due to the VC-handler decoding
race it needs to be checked again in software.

Fixes: 25189d08e5 ("x86/sev-es: Add support for handling IOIO exceptions")
Reported-by: Tom Dohrmann <erbse.13@gmx.de>
Signed-off-by: Joerg Roedel <jroedel@suse.de>
Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Tested-by: Tom Dohrmann <erbse.13@gmx.de>
Cc: <stable@kernel.org>

...

This commit is contained in:

Joerg Roedel 2023-06-21 17:42:42 +02:00 • committed by Borislav Petkov (AMD)

parent a37cd2a59d

commit b9cb9c4558

3 changed files with 47 additions and 7 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

5

arch/x86/boot/compressed/sev.c

View file

22

arch/x86/kernel/sev-shared.c

View file

27

arch/x86/kernel/sev.c

View file