From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pl1-f201.google.com (mail-pl1-f201.google.com [209.85.214.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id F1D7B3C65E2 for ; Tue, 10 Mar 2026 21:18:44 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.214.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1773177527; cv=none; b=dmKLLTXB7uDqvLdM+oxGx/UH1/XKO5t3f+JW2Qv9JcnbLnPp9mn2gad7oRh9V1Nt4agEeDJ68bDD56mc8VHriUawQixEyEWrLmGsnBHMCp1vK2XgegSMk/afm8MPwqMzufADVXwcMXGUPdx6N85wofzf7FU3t2H5EAJBYBXpw/Q= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1773177527; c=relaxed/simple; bh=lXoyEpibePIMwN7X8+UZ8Xzd0ZU8KaHfUstvDxz/4HA=; h=Date:Mime-Version:Message-ID:Subject:From:To:Cc:Content-Type; b=Li+GpuzzMFWvp3ViRT+8HKHx2H5mKAHF0eyQyM8/4/W32rcZ21F8bYxAco5mBNGUvZl84Fspx9KyMkUfaxRFR86jmp3F5e+E62rwDKnmwhVnxoLtHVkAonLC3WkrEUmDsw4kP/bImM+0orpi0otu4oeB68Mo2C5LdpEuG6CY9Ec= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=flex--seanjc.bounces.google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=LYaKCPBl; arc=none smtp.client-ip=209.85.214.201 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--seanjc.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="LYaKCPBl" Received: by mail-pl1-f201.google.com with SMTP id d9443c01a7336-2ae65d5cc57so404730635ad.2 for ; Tue, 10 Mar 2026 14:18:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1773177524; x=1773782324; darn=vger.kernel.org; h=cc:to:from:subject:message-id:mime-version:date:reply-to:from:to:cc :subject:date:message-id:reply-to; bh=OJ/NCAm6P1x5beG5L23G1Uyw+WvXuMXJ331NsI7Ka2w=; b=LYaKCPBlkhKyVMPapldS9FV6Q891+YO5jSp9GPPJujKB+5v4oijWy77OF8DwqknArF HeHWm7daUDWnfm7CntSB9hJNB6F/aD1rpONWIMybdM9ChgnSUYOWh86GA94TgTB9GfrT yP+iZYBBhKhUecY8iA+PN155rqvHPHAeqISrHglJ1jpmbsZ4BRv1m3/9PPeg71nkuy53 M1qWMJmwRUSd1nS+TY+UXjOzRj/LEzNVB1E4/dQnJpSY6M97/xW7Dx6sefDzQKcj52fC FKyVmukMf8e/QIJMyAvlwcXxECXhjGPAsuHZ+XF2dIx/BPmQAGs/UAU31TwnT/9UGgjb 5/SA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1773177524; x=1773782324; h=cc:to:from:subject:message-id:mime-version:date:reply-to :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=OJ/NCAm6P1x5beG5L23G1Uyw+WvXuMXJ331NsI7Ka2w=; b=SPx2pQnhCCUn+THZS3U5MahEwnxKeDRKvIqqVZfzu0zxCaLLOwcG7gCARNkihf0HhJ KWAs8DOZGYlIQx/fZ8QVuOKkqFXOfpOXu7sfbLdeAKEmX7PNXjk+TywgEhXRVdUuKvHU y+QtOWIFvxkNb3IZtTPekDShRkJmiTfa6ns+TAbA8qSan5MYCCiO96cUtwQwq+mwUtRp qRzQjNsMxFk9gl4VhYaKwBbYGOOFoKCVimPr3nx0XdlUaqYVaIY9OOytL2MKVjH6/39I Xy/L9y9shLAsxp+L7x+xFsssUS1r/sI8FT20bGitTnVwMU+Q4nC5o+LRz3/JT7tEAolG qtwA== X-Forwarded-Encrypted: i=1; AJvYcCWkXukxtkTD2LOel5vY5FG4R3Tvm+/C+dqPp85FSW+iFffPEpCMNM0vn/Fqva+4w+o78Jzz6hPSS6mka2g=@vger.kernel.org X-Gm-Message-State: AOJu0YxzHiJ++IbJFExj4A+Jsdwo0lfmRN0/22k0G/uh6s3Uxcwo2qBF lWZkBYgm6mHTQ2YsNSr8ZX70qo6QSsjn+J3h6520diFHwZDxbWXcTNYDTkmeqeLBEU8Tz9fySGc 6J1xWew== X-Received: from plmm19.prod.google.com ([2002:a17:902:c453:b0:2ae:4964:6fe2]) (user=seanjc job=prod-delivery.src-stubby-dispatcher) by 2002:a17:903:2f8d:b0:2aa:d67b:ef96 with SMTP id d9443c01a7336-2aeae85b0cbmr1783765ad.31.1773177524108; Tue, 10 Mar 2026 14:18:44 -0700 (PDT) Reply-To: Sean Christopherson Date: Tue, 10 Mar 2026 14:18:39 -0700 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 X-Mailer: git-send-email 2.53.0.473.g4a7958ca14-goog Message-ID: <20260310211841.2552361-1-seanjc@google.com> Subject: [PATCH 0/2] KVM: SEV: Fix a CR8 intercept goof with SEV-ES guests From: Sean Christopherson To: Sean Christopherson , Paolo Bonzini Cc: kvm@vger.kernel.org, linux-kernel@vger.kernel.org, Srikanth Aithal , Naveen N Rao Content-Type: text/plain; charset="UTF-8" Fix a recently introduced bug where KVM incorrectly enables CR8 write interception when inhibiting AVIC for SEV-ES guests, and extend the SEV+ smoke selftest to guard against similar goofs in the future. Sean Christopherson (2): KVM: SEV: Don't set CR8 write intercept when disabling AVIC for SEV-ES guests KVM: selftests: Verify SEV+ guests can read and write EFER, CR0, CR4, and CR8 arch/x86/kvm/svm/avic.c | 3 +- .../selftests/kvm/include/x86/processor.h | 23 ++++++++++++++ .../selftests/kvm/x86/sev_smoke_test.c | 30 +++++++++++++++++++ 3 files changed, 55 insertions(+), 1 deletion(-) base-commit: 3271085a7f1030ba9897cab60452acd370423ff1 -- 2.53.0.473.g4a7958ca14-goog