From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-yx1-f53.google.com (mail-yx1-f53.google.com [74.125.224.53]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 963B3381AE0 for ; Thu, 30 Jul 2026 19:59:01 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=74.125.224.53 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785441543; cv=none; b=slIdlAJxZxG0cwMhHfzQ5duaLT/00veLm+HYiL4QqDxHh+G8/QOZlVQYqwartVX4uTljNpQH4m6tNLBNtS3IF/kq/w/JBM9p68IVScNwATQ1uq7YqXHdUsU8bYKTE4RaBTljWU4ZLbl8pk/XiY9/ENKiWUAOYo4qNLBkKYyalLw= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785441543; c=relaxed/simple; bh=YdqxTDjnQdkGM8eGeBUBjDCClzMtDvuX+HZ6HpoTqp4=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=ecuAPPFaSBkQ40XyEbh/CLLUJZmH2iiosjG7ZKiDfMJSfUaPFxOBjQxYDjIN4Wyri65gWBQeDL7TYfvrfTwVaEbb0ezAl1XW9N9v8ElBUeLMp7f0lVzwpnCa2Aq4rHpRk0/TpUhmMxYSOSrZKfMFr62FUjQ+YisVaZ2N6KaOi5w= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=cXeKhEFL; arc=none smtp.client-ip=74.125.224.53 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="cXeKhEFL" Received: by mail-yx1-f53.google.com with SMTP id 956f58d0204a3-6685483aad2so197158d50.0 for ; Thu, 30 Jul 2026 12:59:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1785441540; x=1786046340; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=4NcEQ6D9fE6Av6ezyF3EUkO8QCoz/i4y7lfMgzBr5OY=; b=cXeKhEFLIriS0Lpwprdw/hSn/FWhv6TrcItUaNsNlBLti2Kp9cPzpnSF9p589rTjh0 uOXR326PO+nTYGNvEltvRql2uftXjV+vuPW45LG04tODi2JdIJQ2SXkzfQ253ZtUFL4v vxzONiC2EWApibIAzuWrJYV0ziEFuW0ueYmCZtzdk3IHK4p/QsAxwGGbpKe9f3WyVJ0S Ek/nyYOkOM9KqSR+K3C9R2FaXVN4TMZg1qnHSf4yd0k7WwOtK+s4kNEk1WU4bV/Achdn 1YkmN4aprDj+eTBwpikuVlpi/bS5ncC25f9l6NjU7KJOng+GqFsqx45zY9oaIxEVVr3n xFzQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1785441540; x=1786046340; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=4NcEQ6D9fE6Av6ezyF3EUkO8QCoz/i4y7lfMgzBr5OY=; b=gtKexU4WgRxHYAp5Pof/C2B7g+HO6n1UtbkAVLIi+a62y/hXoLGosxFv3e86yCat7I o8d7MsbmnOmYjeN/z1V9b25Qt2VQA7a0tktuGQB4F9wuvXytSr0E7NOG8dYcKWBAtLg4 NKBSO7JlDmCJECSg48O3US7h2uBEDVrXg/sGjwm1ydaIHuR0AC3SKsugqK023dnHBS/F bVu60+TXPqJnwdWczy3ZfJXRMJoRenkiogMhzevbtVzNwxkMrE3DB7Ve+GFR2StoyPJW 2oaHdtZzSVvfCOGcLgu17KLXy2DLxhMHjj0t5xv6Y1MSrYqNIcpkzKfFGQSeVp24WuPP IQuA== X-Gm-Message-State: AOJu0Yz9HlmTvM7M+mqSbacSPammzi8JcTQvK83SHKyopHDMFn9dWRZb k4UmkqN62Q78Wr7f8LDlXJWp4rNC1dQFffgeMASTpEoddSNtQU/4wDNy4LX0 X-Gm-Gg: AR+sD109wmscD8UKha2s0vcVW8pwDrCLE2Juj+QLbt782PzWO9e6ZSmy8dw0Szts0Oi 4e2N7t/Ce1IZWEujV+YJZXMWF0VDFxQTgOmG4Yj3DMyxRH2S/m4kJM0nbiiDz/l122FAqTtgk7M k/VwbvOwotpVvxfts1ZKWCByFzKpZLQMmwoiFZscgRDG0oKBB7zfipk/L/g8x8f3Ac3WhXrovxZ d3wapbLkyq7WkHLzJwWCc3Qt1iN6qW0JuePb+e/q8xY0lMLuvIqt4dLG10FWVJwXwZsggA6aK/j 52p+AdVqZyPckZsIXlOaUGkiuupENsWKRCpEsohdHm3hstU+sGnweE+ZZ1OUFqPssSGp8Hu+46J 9S+K6SkCT0GC4XBX2oo/cyoMGA424SBzTOJXjx2YjIN+ctvK/dpG6NRqxOOHLZGlZcfJ6XDkB8O 6mVVx0gkdwncroFcZdNUOMLc05wEBXbdsJ3LVMVPvErw== X-Received: by 2002:a05:690e:4419:b0:667:c250:db7c with SMTP id 956f58d0204a3-6692f4ef98cmr1935374d50.31.1785441540566; Thu, 30 Jul 2026 12:59:00 -0700 (PDT) Received: from citadel.lan ([2600:6c4a:4df0:2c10::1dba]) by smtp.gmail.com with ESMTPSA id 956f58d0204a3-6692c925a87sm1961623d50.15.2026.07.30.12.58.59 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 30 Jul 2026 12:58:59 -0700 (PDT) From: Brian Gerst To: linux-kernel@vger.kernel.org, x86@kernel.org Cc: Thomas Gleixner , Borislav Petkov , Ard Biesheuvel , Juergen Gross , Tom Lendacky , Brian Gerst Subject: [PATCH v2 1/5] x86/sme: Clear decrypted BSS separately Date: Thu, 30 Jul 2026 15:58:50 -0400 Message-ID: <20260730195854.421115-2-brgerst@gmail.com> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260730195854.421115-1-brgerst@gmail.com> References: <20260730195854.421115-1-brgerst@gmail.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit The decrypted BSS section needs to be cleared after it is remapped as decrypted memory. Separate it so that the normal BSS section can be cleared earlier. Signed-off-by: Brian Gerst --- arch/x86/kernel/vmlinux.lds.S | 2 +- arch/x86/mm/mem_encrypt_amd.c | 4 ++++ 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/arch/x86/kernel/vmlinux.lds.S b/arch/x86/kernel/vmlinux.lds.S index 2438b89a4620..e64c797e06c7 100644 --- a/arch/x86/kernel/vmlinux.lds.S +++ b/arch/x86/kernel/vmlinux.lds.S @@ -365,9 +365,9 @@ SECTIONS *(.bss..page_aligned) . = ALIGN(PAGE_SIZE); *(BSS_MAIN) - BSS_DECRYPTED . = ALIGN(PAGE_SIZE); __bss_stop = .; + BSS_DECRYPTED } /* diff --git a/arch/x86/mm/mem_encrypt_amd.c b/arch/x86/mm/mem_encrypt_amd.c index 2f8c32173972..50a53fa10c96 100644 --- a/arch/x86/mm/mem_encrypt_amd.c +++ b/arch/x86/mm/mem_encrypt_amd.c @@ -476,6 +476,10 @@ void __init early_set_mem_enc_dec_hypercall(unsigned long vaddr, unsigned long s void __init sme_early_init(void) { + /* Needs to be cleared even if encryption is not enabled */ + memset(__start_bss_decrypted, 0, + (unsigned long) __end_bss_decrypted - (unsigned long) __start_bss_decrypted); + if (!sme_me_mask) return; -- 2.55.0