github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-05-26 08:02:27 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

x86/sev: Prevent SECURE_AVIC_CONTROL MSR interception for Secure AVIC guests

Browse Source 
The SECURE_AVIC_CONTROL MSR holds the GPA of the guest APIC backing page and
bitfields to control enablement of Secure AVIC and whether the guest allows
NMIs to be injected by the hypervisor.

This MSR is populated by the guest and can be read by the guest to get the GPA
of the APIC backing page. The MSR can only be accessed in Secure AVIC mode.
Any attempt to access it when not in Secure AVIC mode results in #GP. So, the
hypervisor should not intercept it. A #VC exception will be generated
otherwise. If this occurs and Secure AVIC is enabled, terminate the guest
execution.

Signed-off-by: Neeraj Upadhyay <Neeraj.Upadhyay@amd.com>
Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Reviewed-by: Tianyu Lan <tiala@microsoft.com>
Link: https://lore.kernel.org/20250828113119.209135-1-Neeraj.Upadhyay@amd.com
This commit is contained in:
Neeraj Upadhyay 2025-08-28 17:01:19 +05:30 committed by Borislav Petkov (AMD)
parent c4074ab87f
commit 952aefeebb
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
arch/x86/coco/sev/vc-handle.c
View File

@ -415,6 +415,15 @@ enum es_result sev_es_ghcb_handle_msr(struct ghcb *ghcb, struct es_em_ctxt *ctxt
if (sev_status & MSR_AMD64_SNP_SECURE_TSC)
return __vc_handle_secure_tsc_msrs(ctxt, write);
break;
case MSR_AMD64_SAVIC_CONTROL:
/*
* AMD64_SAVIC_CONTROL should not be intercepted when
* Secure AVIC is enabled. Terminate the Secure AVIC guest
* if the interception is enabled.
*/
if (cc_platform_has(CC_ATTR_SNP_SECURE_AVIC))
return ES_VMM_ERROR;
break;
default:
break;
}