Re: [PATCH 4/4] kvm: svm: Support KVM_SEV_SNP_PAGE_TYPE_VMSA at SNP_LAUNCH_UPDATE

["Jörg Rödel" <joro@8bytes.org>]

On Tue, Jun 16, 2026 at 05:11:59PM -0500, Tom Lendacky wrote:
> On 6/11/26 07:35, Jörg Rödel wrote:
> > +		if (sev_populate_args->type == KVM_SEV_SNP_PAGE_TYPE_VMSA) {
> > +			accept_page = snp_check_launch_vmsa(sev, vmsa);
> > +			if (accept_page)
> > +				sev_features = vmsa->sev_features;
> > +		}
> 
> I don't think there is a race here given the way guest_memfd works
> today. I haven't followed in-place conversion closely, but will that
> result in a race between when the snp_check_launch_vmsa() check is
> performed and before the page is made a firmware page?

I don't know too much about the in-place conversion changes, but when they
directly pass user-memory to the PSP for encryption the code still needs to
make sure it is not mapped to user-space anymore once it is made private.

So with in-place conversion this might need changing so that the sev_features
check is placed after the page has been unmapped from user-mode and before it
is passed to the PSP.

> > +	if (ret == 0 && sev_populate_args->type == KVM_SEV_SNP_PAGE_TYPE_VMSA)
> 
> s/ret == 0/!ret/

Updated.

Thanks,

	Joerg