From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Google-Smtp-Source: AH8x225csINDA3h2Fn6012Qhvur75JkIBgQxyZYoCcDViiY9/3hnsHzsG733Y1JtFKdxA2SBMq1/ ARC-Seal: i=1; a=rsa-sha256; t=1517404257; cv=none; d=google.com; s=arc-20160816; b=n7d29fUvHpekCUty7Dpcat7phomJSxXdUIwXXrGPxhFLDVFMmTk26j/027YmzD7bDo 7cK1tRcOjA3ZWhMHcBM0xuWRED6YTy4MAG077dpS2DrfGLWjGNp+fTxvMcfMIBj/RPzV 3kgKuCoz7ioYkuvb2TFFomAPx4Qgad1El3f1x4LcAe9fKJw9bqcS85tFA/F9qbbto4bt +e9JQEUd2rL1TkuumN5psw/1C/3ZtPB6FCy0eXmVy8Glax2jSVu6n/NM9RRT53iJDel5 4iJqy+cDZxCgj8vXn7m49UQD274+b3/BuI5Ow4VK0yvNW5xZ3JCJ1T19yd5aqql9kfGT KEqQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:dkim-signature:arc-authentication-results; bh=FQSkZ0rLY7bRcGZiV9Cap8HQi9Zs5ns/YxZ1ulFfuZU=; b=yNUVfww3whWr0Lg4mR8JoctpDBiKXjY7khfVD45OcvdVQuJ/UhSjiZBDDRPNbCGR3Z 4si9/OEC9L70Y1m5PrjT7Qm+IBXZj8X2HAWoMCcm8lY7Bl1QXpKuk7NPGRKk/Kig4Lcv PxPQ0xI3Z60Zg8VELVXOOMxrBJmh/E+3djZjRcAIrCgMHJdHYFufJehGszfaO0202YHC cmHrGpoAb9n29oQ3bB2JmioHkVwpNg8kw6OY5Gr3wbS9CXhxdloH7SpDqX2xr+pj7AXy h3YE/7POBTlnGGyFMdM8ttYY7pTphe5+pqmZpUP8nX0jOVH6AeeCvoKHnFsLTNXZ+n61 A9RA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@amazon.de header.s=amazon201209 header.b=XEpTkUmm; spf=pass (google.com: domain of prvs=562a19d0d=karahmed@amazon.com designates 207.171.184.29 as permitted sender) smtp.mailfrom=prvs=562a19d0d=karahmed@amazon.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=amazon.de Authentication-Results: mx.google.com; dkim=pass header.i=@amazon.de header.s=amazon201209 header.b=XEpTkUmm; spf=pass (google.com: domain of prvs=562a19d0d=karahmed@amazon.com designates 207.171.184.29 as permitted sender) smtp.mailfrom=prvs=562a19d0d=karahmed@amazon.com; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=amazon.de X-IronPort-AV: E=Sophos;i="5.46,440,1511827200"; d="scan'208";a="591672100" From: KarimAllah Ahmed To: x86@kernel.org, linux-kernel@vger.kernel.org, kvm@vger.kernel.org Cc: KarimAllah Ahmed , Andi Kleen , Andrea Arcangeli , Andy Lutomirski , Arjan van de Ven , Ashok Raj , Asit Mallick , Borislav Petkov , Dan Williams , Dave Hansen , David Woodhouse , Greg Kroah-Hartman , "H . Peter Anvin" , Ingo Molnar , Janakarajan Natarajan , Joerg Roedel , Jun Nakajima , Laura Abbott , Linus Torvalds , Masami Hiramatsu , Paolo Bonzini , Peter Zijlstra , =?UTF-8?q?Radim=20Kr=C4=8Dm=C3=A1=C5=99?= , Thomas Gleixner , Tim Chen , Tom Lendacky Subject: [PATCH v4 0/5] KVM: Expose speculation control feature to guests Date: Wed, 31 Jan 2018 14:10:26 +0100 Message-Id: <1517404231-22406-1-git-send-email-karahmed@amazon.de> X-Mailer: git-send-email 2.7.4 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-getmail-retrieved-from-mailbox: INBOX X-GMAIL-THRID: =?utf-8?q?1591113686906914955?= X-GMAIL-MSGID: =?utf-8?q?1591113686906914955?= X-Mailing-List: linux-kernel@vger.kernel.org List-ID: Add direct access to speculation control MSRs for KVM guests. This allows the guest to protect itself against Spectre V2 using IBRS+IBPB instead of a retpoline+IBPB based approach. It also exposes the ARCH_CAPABILITIES MSR which is going to be used by future Intel processors to indicate RDCL_NO and IBRS_ALL. v4: - Add IBRS passthrough for SVM (5/5). - Handle nested guests properly. - expose F(IBRS) in kvm_cpuid_8000_0008_ebx_x86_features Ashok Raj (1): KVM: x86: Add IBPB support KarimAllah Ahmed (4): KVM: x86: Update the reverse_cpuid list to include CPUID_7_EDX KVM: VMX: Emulate MSR_IA32_ARCH_CAPABILITIES KVM: VMX: Allow direct access to MSR_IA32_SPEC_CTRL KVM: SVM: Allow direct access to MSR_IA32_SPEC_CTRL arch/x86/kvm/cpuid.c | 22 +++++++--- arch/x86/kvm/cpuid.h | 1 + arch/x86/kvm/svm.c | 85 ++++++++++++++++++++++++++++++++++++++ arch/x86/kvm/vmx.c | 114 ++++++++++++++++++++++++++++++++++++++++++++++++++- arch/x86/kvm/x86.c | 1 + 5 files changed, 216 insertions(+), 7 deletions(-) Cc: Andi Kleen Cc: Andrea Arcangeli Cc: Andy Lutomirski Cc: Arjan van de Ven Cc: Ashok Raj Cc: Asit Mallick Cc: Borislav Petkov Cc: Dan Williams Cc: Dave Hansen Cc: David Woodhouse Cc: Greg Kroah-Hartman Cc: H. Peter Anvin Cc: Ingo Molnar Cc: Janakarajan Natarajan Cc: Joerg Roedel Cc: Jun Nakajima Cc: Laura Abbott Cc: Linus Torvalds Cc: Masami Hiramatsu Cc: Paolo Bonzini Cc: Peter Zijlstra Cc: Radim Krčmář Cc: Thomas Gleixner Cc: Tim Chen Cc: Tom Lendacky Cc: kvm@vger.kernel.org Cc: linux-kernel@vger.kernel.org Cc: x86@kernel.org -- 2.7.4