Tom Lendacky ad5b353240 KVM: SVM: Do not terminate SEV-ES guests on GHCB validation failure ... Currently, an SEV-ES guest is terminated if the validation of the VMGEXIT exit code or exit parameters fails. The VMGEXIT instruction can be issued from userspace, even though userspace (likely) can't update the GHCB. To prevent userspace from being able to kill the guest, return an error through the GHCB when validation fails rather than terminating the guest. For cases where the GHCB can't be updated (e.g. the GHCB can't be mapped, etc.), just return back to the guest. The new error codes are documented in the lasest update to the GHCB specification. Fixes: 291bd20d5d ("KVM: SVM: Add initial support for a VMGEXIT VMEXIT") Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com> Message-Id: <b57280b5562893e2616257ac9c2d4525a9aeeb42.1638471124.git.thomas.lendacky@amd.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		2021-12-05 03:02:04 -05:00
..
mmu	KVM: x86/mmu: Retry page fault if root is invalidated by memslot update	2021-12-02 04:12:12 -05:00
svm	KVM: SVM: Do not terminate SEV-ES guests on GHCB validation failure	2021-12-05 03:02:04 -05:00
vmx	KVM: VMX: Set failure code in prepare_vmcs02()	2021-12-02 04:12:11 -05:00
Kconfig	KVM: x86: add config for non-kvm users of page tracking	2021-10-01 03:44:57 -04:00
Makefile	KVM: stats: Add fd-based API to read binary stats data	2021-06-24 11:47:57 -04:00
cpuid.c	cpuid: kvm_find_kvm_cpuid_features() should be declared 'static'	2021-11-18 02:03:14 -05:00
cpuid.h	KVM: x86: Move reverse CPUID helpers to separate header file	2021-04-26 05:27:13 -04:00
debugfs.c	KVM: X86: Introduce mmu_rmaps_stat per-vm debugfs file	2021-08-20 16:06:11 -04:00
emulate.c	KVM/arm64 updates for Linux 5.16	2021-10-31 02:28:48 -04:00
fpu.h	KVM: x86: Move FPU register accessors into fpu.h	2021-06-17 13:09:24 -04:00
hyperv.c	KVM: x86: Assume a 64-bit hypercall for guests with protected state	2021-11-18 02:12:13 -05:00
hyperv.h	KVM: x86: Query vcpu->vcpu_idx directly and drop its accessor	2021-09-22 10:33:11 -04:00
i8254.c	KVM: x86: Migrate the PIT only if vcpu0 is migrated, not any BSP	2021-08-02 11:01:51 -04:00
i8254.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
i8259.c	x86: Fix typo s/ECLR/ELCR/ for the PIC register	2021-08-10 23:31:44 +02:00
ioapic.c	kvm: rename KVM_MAX_VCPU_ID to KVM_MAX_VCPU_IDS	2021-09-30 04:27:05 -04:00
ioapic.h	x86/kvm: remove unused ack_notifier callbacks	2021-11-18 07:05:57 -05:00
irq.c	KVM: x86/xen: Add event channel interrupt vector upcall	2021-02-04 14:19:39 +00:00
irq.h	x86/kvm: remove unused ack_notifier callbacks	2021-11-18 07:05:57 -05:00
irq_comm.c	x86: Fix various typos in comments	2021-03-18 15:31:53 +01:00
kvm_cache_regs.h	KVM: x86: Introduce KVM_GET_SREGS2 / KVM_SET_SREGS2	2021-06-17 13:09:47 -04:00
kvm_emulate.h	KVM: x86: Drop "pre_" from enter/leave_smm() helpers	2021-06-17 13:09:35 -04:00
kvm_onhyperv.c	KVM: x86: hyper-v: Move the remote TLB flush logic out of vmx	2021-06-17 13:09:36 -04:00
kvm_onhyperv.h	KVM: x86: hyper-v: Move the remote TLB flush logic out of vmx	2021-06-17 13:09:36 -04:00
lapic.c	KVM: x86: check PIR even for vCPUs with disabled APICv	2021-11-30 03:52:39 -05:00
lapic.h	KVM: x86: Rename kvm_lapic_enable_pv_eoi()	2021-11-11 10:56:22 -05:00
mmu.h	KVM: X86: Don't unload MMU in kvm_vcpu_flush_tlb_guest()	2021-10-22 05:44:43 -04:00
mtrr.c	KVM: x86: Add helper to consolidate "raw" reserved GPA mask calculations	2021-02-04 09:27:30 -05:00
pmu.c	kvm: x86: Convert return type of *is_valid_rdpmc_ecx() to bool	2021-11-11 10:56:19 -05:00
pmu.h	kvm: x86: Convert return type of *is_valid_rdpmc_ecx() to bool	2021-11-11 10:56:19 -05:00
reverse_cpuid.h	KVM: SEV: Mask CPUID[0x8000001F].eax according to supported features	2021-04-26 05:27:15 -04:00
trace.h	KVM: x86: Get exit_reason as part of kvm_x86_ops.get_exit_info	2021-10-25 06:48:24 -04:00
tss.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
x86.c	KVM: ensure APICv is considered inactive if there is no APIC	2021-12-02 04:12:11 -05:00
x86.h	KVM: nVMX: Abide to KVM_REQ_TLB_FLUSH_GUEST request on nested vmentry/vmexit	2021-11-26 07:07:49 -05:00
xen.c	KVM: x86: Assume a 64-bit hypercall for guests with protected state	2021-11-18 02:12:13 -05:00
xen.h	KVM: xen: do not use struct gfn_to_hva_cache	2021-08-05 03:31:40 -04:00