diff options
| author |   Paolo Bonzini <pbonzini@redhat.com> | 2025-06-12 00:47:44 -0400 |
|---|---|---|
| committer | Paolo Bonzini <pbonzini@redhat.com> | 2025-06-12 00:51:42 -0400 |
| commit | 8046d29dde17002523f94d3e6e0ebe486ce52166 (patch) | |
| tree | 8fae8cdb87a817126365595643df883f16b5e979 /arch/x86/kvm | |
| parent | KVM: x86/mmu: Embed direct bits into gpa for KVM_PRE_FAULT_MEMORY (diff) | |
| download | wireguard-linux-8046d29dde17002523f94d3e6e0ebe486ce52166.tar.xz wireguard-linux-8046d29dde17002523f94d3e6e0ebe486ce52166.zip | |
KVM: x86/mmu: Reject direct bits in gpa passed to KVM_PRE_FAULT_MEMORY
Only let userspace pass the same addresses that were used in KVM_SET_USER_MEMORY_REGION
(or KVM_SET_USER_MEMORY_REGION2); gpas in the the upper half of the address space
are an implementation detail of TDX and KVM.
Extracted from a patch by Sean Christopherson <seanjc@google.com>.
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'arch/x86/kvm')
| -rw-r--r-- | arch/x86/kvm/mmu/mmu.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/arch/x86/kvm/mmu/mmu.c b/arch/x86/kvm/mmu/mmu.c index a4040578b537..4e06e2e89a8f 100644 --- a/arch/x86/kvm/mmu/mmu.c +++ b/arch/x86/kvm/mmu/mmu.c @@ -4903,6 +4903,9 @@ long kvm_arch_vcpu_pre_fault_memory(struct kvm_vcpu *vcpu, if (!vcpu->kvm->arch.pre_fault_allowed) return -EOPNOTSUPP; + if (kvm_is_gfn_alias(vcpu->kvm, gpa_to_gfn(range->gpa))) + return -EINVAL; + /* * reload is efficient when called repeatedly, so we can do it on * every iteration. |