diff options
| author | Josh Poimboeuf <jpoimboe@kernel.org> | 2022-06-14 23:16:13 +0200 |
|---|---|---|
| committer | Borislav Petkov <bp@suse.de> | 2022-06-27 10:34:00 +0200 |
| commit | fc02735b14fff8c6678b521d324ade27b1a3d4cf (patch) | |
| tree | 9be32b1a805858cab02c043a740b2bab8f45a15c /include/misc | |
| parent | KVM: VMX: Convert launched argument to flags (diff) | |
| download | linux-fc02735b14fff8c6678b521d324ade27b1a3d4cf.tar.xz linux-fc02735b14fff8c6678b521d324ade27b1a3d4cf.zip | |
KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS
On eIBRS systems, the returns in the vmexit return path from
__vmx_vcpu_run() to vmx_vcpu_run() are exposed to RSB poisoning attacks.
Fix that by moving the post-vmexit spec_ctrl handling to immediately
after the vmexit.
Signed-off-by: Josh Poimboeuf <jpoimboe@kernel.org>
Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
Signed-off-by: Borislav Petkov <bp@suse.de>
Diffstat (limited to 'include/misc')
0 files changed, 0 insertions, 0 deletions