All of lore.kernel.org
 help / color / mirror / Atom feed
* Re: [PATCH 5.15.y v2 0/8] KVM: fixes for CVE-2026-46113 and related issues
@ 2026-07-23  6:36 Sergey Senozhatsky
  2026-07-23  9:36 ` Paolo Bonzini
  0 siblings, 1 reply; 9+ messages in thread
From: Sergey Senozhatsky @ 2026-07-23  6:36 UTC (permalink / raw)
  To: pbonzini; +Cc: kvm, linux-kernel, stable, senozhatsky

> Sasha, Greg,
> 
> this is the backport to 5.15 for the above CVE.  The fix was relatively
> simple upstream but only due to years of refactoring and cleaning up
> of the code; fixing from scratch is not really feasible so start by
> applying the patches that are needed.
> 
> Please apply this instead of v1, due to a missing line in the last
> patch.  Sorry about that.

Sorry for the noise, has this series stuck?

^ permalink raw reply	[flat|nested] 9+ messages in thread
* [PATCH 5.15.y v2 0/8] KVM: fixes for CVE-2026-46113 and related issues
@ 2026-06-26 17:46 Paolo Bonzini
  2026-06-27 16:35 ` Sasha Levin
  0 siblings, 1 reply; 9+ messages in thread
From: Paolo Bonzini @ 2026-06-26 17:46 UTC (permalink / raw)
  To: linux-kernel, kvm, stable

Sasha, Greg,

this is the backport to 5.15 for the above CVE.  The fix was relatively
simple upstream but only due to years of refactoring and cleaning up
of the code; fixing from scratch is not really feasible so start by
applying the patches that are needed.

Please apply this instead of v1, due to a missing line in the last
patch.  Sorry about that.

Paolo

David Matlack (2):
  KVM: x86/mmu: Use a bool for direct
  KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root()

Paolo Bonzini (5):
  KVM: x86/mmu: Derive shadow MMU page role from parent
  KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes
  KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page()
  KVM: x86: Fix shadow paging use-after-free due to unexpected role

Sean Christopherson (2):
  KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
  KVM: x86/mmu: Ensure hugepage is in by slot before checking max
    mapping level

 arch/x86/kvm/mmu/mmu.c         | 192 +++++++++++++++++++++------------
 arch/x86/kvm/mmu/paging_tmpl.h |  30 +++---
 arch/x86/kvm/mmu/spte.h        |   5 +
 arch/x86/kvm/vmx/vmx_ops.h     |   3 +-
 include/linux/kvm_host.h       |   7 +-
 5 files changed, 147 insertions(+), 90 deletions(-)

-- 
2.54.0


^ permalink raw reply	[flat|nested] 9+ messages in thread
* [PATCH 5.10.y 00/17] KVM: fixes for CVE-2026-46113 and related issues
@ 2026-06-26 11:26 Paolo Bonzini
  2026-07-23  6:39 ` [PATCH 5.15.y v2 0/8] " Sergey Senozhatsky
  0 siblings, 1 reply; 9+ messages in thread
From: Paolo Bonzini @ 2026-06-26 11:26 UTC (permalink / raw)
  To: linux-kernel, kvm, stable

Sasha, Greg,

this is the backport to 5.10 for the above CVE.  Similar to 5.15, the
fix was relatively simple upstream but only due to years of refactoring
and cleaning up of the code; fixing from scratch is not really feasible
so start by applying the patches that are needed.

Paolo

David Matlack (2):
  KVM: x86/mmu: Use a bool for direct
  KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root()

Lai Jiangshan (2):
  KVM: X86: Fix missed remote tlb flush in rmap_write_protect()
  KVM: X86: Synchronize the shadow pagetable before link it

Paolo Bonzini (5):
  KVM: x86/mmu: Derive shadow MMU page role from parent
  KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes
  KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page()
  KVM: x86: Fix shadow paging use-after-free due to unexpected role

Sean Christopherson (9):
  KVM: x86/mmu: Capture 'mmu' in a local variable when allocating roots
  KVM: x86/mmu: Allocate the lm_root before allocating PAE roots
  KVM: x86/mmu: Allocate pae_root and lm_root pages in dedicated helper
  KVM: x86/mmu: Ensure MMU pages are available when allocating roots
  KVM: x86/mmu: Refactor shadow walk in __direct_map() to reduce
    indentation
  KVM: x86/mmu: Check PDPTRs before allocating PAE roots
  KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
  KVM: x86/mmu: Pass the memslot to the rmap callbacks
  KVM: x86/mmu: Ensure hugepage is in by slot before checking max
    mapping level

 arch/x86/kvm/mmu/mmu.c         | 431 ++++++++++++++++++++-------------
 arch/x86/kvm/mmu/paging_tmpl.h |  72 +++---
 arch/x86/kvm/mmu/spte.h        |   5 +
 arch/x86/kvm/mmu/tdp_mmu.c     |  23 +-
 arch/x86/kvm/vmx/vmx_ops.h     |   3 +-
 include/linux/kvm_host.h       |   5 +
 6 files changed, 308 insertions(+), 231 deletions(-)

-- 
2.54.0


^ permalink raw reply	[flat|nested] 9+ messages in thread
end of thread, other threads:[~2026-07-23 13:36 UTC | newest]

Thread overview: 9+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-07-23  6:36 [PATCH 5.15.y v2 0/8] KVM: fixes for CVE-2026-46113 and related issues Sergey Senozhatsky
2026-07-23  9:36 ` Paolo Bonzini
  -- strict thread matches above, loose matches on Subject: below --
2026-06-26 17:46 Paolo Bonzini
2026-06-27 16:35 ` Sasha Levin
2026-07-10  5:52   ` Kenta Akagi
2026-07-10 21:24     ` Sasha Levin
2026-06-26 11:26 [PATCH 5.10.y 00/17] " Paolo Bonzini
2026-07-23  6:39 ` [PATCH 5.15.y v2 0/8] " Sergey Senozhatsky
2026-07-23  7:43   ` Greg KH
2026-07-23 13:36     ` Paolo Bonzini

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.