Joerg Roedel d28aa3c157 x86/boot/compressed/64: Check SEV encryption in the 32-bit boot-path ...

commit fef81c86262879d4b1176ef51a834c15b805ebb9 upstream.

Check whether the hypervisor reported the correct C-bit when running
as an SEV guest. Using a wrong C-bit position could be used to leak
sensitive data from the guest to the hypervisor.

Signed-off-by: Joerg Roedel <jroedel@suse.de>
Signed-off-by: Borislav Petkov <bp@suse.de>
Link: https://lkml.kernel.org/r/20210312123824.306-8-joro@8bytes.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-05-26 12:06:57 +02:00

..

.gitignore

.gitignore: add SPDX License Identifier

2020-03-25 11:50:48 +01:00

acpi.c

x86/boot: Fix -Wint-to-pointer-cast build warning

2020-05-04 15:22:16 +02:00

cmdline.c

x86/boot: Build the command line parsing code unconditionally

2019-02-01 11:51:01 +01:00

cpuflags.c

x86/sev-es: Check required CPU features for SEV-ES

2020-09-10 21:49:25 +02:00

early_serial_console.c

x86, boot: Don't compile early_serial_console.c when !CONFIG_EARLY_PRINTK

2014-08-17 14:58:24 -07:00

efi_thunk_64.S

efi/x86: Drop the special GDT for the EFI thunk

2020-05-24 00:25:15 +02:00

error.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

error.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

head_32.S

x86/boot: Remove run-time relocations from head_{32,64}.S

2020-08-14 12:52:35 +02:00

head_64.S

x86/boot/compressed/64: Check SEV encryption in the 32-bit boot-path

2021-05-26 12:06:57 +02:00

ident_map_64.c

x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path

2020-10-29 18:06:52 +01:00

idt_64.c

x86/boot/compressed/64: Setup a GHCB-based VC Exception handler

2020-09-07 19:45:25 +02:00

idt_handlers_64.S

x86/boot/compressed/64: Setup a GHCB-based VC Exception handler

2020-09-07 19:45:25 +02:00

kaslr.c

x86/boot/64: Initialize 5-level paging variables earlier

2020-10-19 12:47:21 +02:00

kernel_info.S

x86/boot: Introduce setup_indirect

2019-11-12 16:21:15 +01:00

Makefile

x86/boot: Add $(CLANG_FLAGS) to compressed KBUILD_CFLAGS

2021-05-11 14:47:18 +02:00

mem_encrypt.S

x86/sev: Do not require Hypervisor CPUID bit for SEV guests

2021-05-11 14:47:17 +02:00

misc.c

x86/boot/compressed/64: Setup a GHCB-based VC Exception handler

2020-09-07 19:45:25 +02:00

misc.h

x86/boot/compressed/64: Check SEV encryption in 64-bit boot-path

2020-10-29 18:06:52 +01:00

mkpiggy.c

x86/boot: Remove run-time relocations from head_{32,64}.S

2020-08-14 12:52:35 +02:00

pgtable_64.c

treewide: Convert macro and uses of __section(foo) to __section("foo")

2020-10-25 14:51:49 -07:00

pgtable.h

x86/boot/compressed/64: Set EFER.LME=1 in 32-bit trampoline before returning to long mode

2019-01-29 21:58:59 +01:00

sev-es.c

x86/sev-es: Use new for_each_insn_prefix() macro to loop over prefixes bytes

2020-12-06 10:03:08 +01:00

string.c

x86/boot: Provide KASAN compatible aliases for string routines

2019-05-24 08:44:16 +02:00

vmlinux.lds.S

x86/boot/compressed: Add missing debugging sections to output

2020-09-01 10:03:18 +02:00