diff options
| author | Krish Sadhukhan | 2018-09-04 20:42:58 +0200 |
|---|---|---|
| committer | Paolo Bonzini | 2018-09-20 00:51:45 +0200 |
| commit | ba8e23db59dc07e5de74fd7bd310e297d3e4ba54 (patch) | |
| tree | 0f6078a01354c450227685a66475904d76918e00 /arch/x86 | |
| parent | nVMX x86: check posted-interrupt descriptor addresss on vmentry of L2 (diff) | |
| download | kernel-qcow2-linux-ba8e23db59dc07e5de74fd7bd310e297d3e4ba54.tar.gz kernel-qcow2-linux-ba8e23db59dc07e5de74fd7bd310e297d3e4ba54.tar.xz kernel-qcow2-linux-ba8e23db59dc07e5de74fd7bd310e297d3e4ba54.zip | |
nVMX x86: Check VPID value on vmentry of L2 guests
According to section "Checks on VMX Controls" in Intel SDM vol 3C, the
following check needs to be enforced on vmentry of L2 guests:
If the 'enable VPID' VM-execution control is 1, the value of the
of the VPID VM-execution control field must not be 0000H.
Signed-off-by: Krish Sadhukhan <krish.sadhukhan@oracle.com>
Reviewed-by: Mark Kanda <mark.kanda@oracle.com>
Reviewed-by: Liran Alon <liran.alon@oracle.com>
Reviewed-by: Jim Mattson <jmattson@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'arch/x86')
| -rw-r--r-- | arch/x86/kvm/vmx.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/arch/x86/kvm/vmx.c b/arch/x86/kvm/vmx.c index 581bdbd9844b..06412ba46aa3 100644 --- a/arch/x86/kvm/vmx.c +++ b/arch/x86/kvm/vmx.c @@ -12373,6 +12373,9 @@ static int check_vmentry_prereqs(struct kvm_vcpu *vcpu, struct vmcs12 *vmcs12) vmcs12->guest_activity_state != GUEST_ACTIVITY_HLT) return VMXERR_ENTRY_INVALID_CONTROL_FIELD; + if (nested_cpu_has_vpid(vmcs12) && !vmcs12->virtual_processor_id) + return VMXERR_ENTRY_INVALID_CONTROL_FIELD; + if (nested_vmx_check_io_bitmap_controls(vcpu, vmcs12)) return VMXERR_ENTRY_INVALID_CONTROL_FIELD; |