From: Sean Christopherson <seanjc@google.com>
To: Stanislav Uschakow <suschako@amazon.de>
Cc: "kvm@vger.kernel.org" <kvm@vger.kernel.org>
Subject: Re: [5.10.x Backport CVE-2021-47094] KVM: x86/mmu: Don't advance iterator after restart due to yielding
Date: Mon, 8 Jul 2024 10:45:29 -0700 [thread overview]
Message-ID: <ZowluXkwYJjPR2mL@google.com> (raw)
In-Reply-To: <c461682ef5aa422faf1ce13aab447b09@amazon.de>
On Sun, Jun 30, 2024, Stanislav Uschakow wrote:
> This is a request for comment backport of
>
> <https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3a0f64de479cae75effb630a2e0a237ca0d0623c>
>
> - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b601c3bc9d5053065acdaa1481c
>
> - https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=d884eefd75cc54887bc2e9e724207443525dfb2c
>
> for 5.10.x. I ran the kvm-unit-tests on patched and unpatched kernel without introducing regressions.
>
> I'm not quite sure if that backport is sufficient since the d884eefd75cc
> targets v5.15 and the codebase differs quite between v5.10 and v5.15.
Why? The 5.10 implementation isn't suitable for anything remotely resembling a
production environment. The TDP MMU wasn't enabled by default until 5.15 for
very good reasons.
And even in 5.15, using the TDP MMU dicey. See commit 7e546bd08943 ("Revert "KVM:
x86: enable TDP MMU by default"") from the 5.15.y stable tree.
prev parent reply other threads:[~2024-07-08 17:45 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-06-30 20:24 [5.10.x Backport CVE-2021-47094] KVM: x86/mmu: Don't advance iterator after restart due to yielding Uschakow, Stanislav
2024-07-08 17:45 ` Sean Christopherson [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=ZowluXkwYJjPR2mL@google.com \
--to=seanjc@google.com \
--cc=kvm@vger.kernel.org \
--cc=suschako@amazon.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.