From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from out-176.mta1.migadu.com (out-176.mta1.migadu.com [95.215.58.176]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 2F6F4353EF7 for ; Mon, 1 Jun 2026 23:04:56 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=95.215.58.176 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780355099; cv=none; b=X06SuK63lNuWyXt/Nx25u7r7UJQfKzcClimDRDT3uHtd9EHt71IpvFb8KEpzSjxSU59xOV/YZd74cJYUza3LHg1tsR0y8qRNR3YwHsJCkLGnE0AMydp7sPyZAsxUaL9jLBZGscC2r2MLSpJycaAiWjIj0+yWusive8EWZKey9Rw= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780355099; c=relaxed/simple; bh=LlFLtsINCgccXSPn4jWjE8uZpKLYLfsXdGiD4JrYBSw=; h=From:Subject:Date:Message-Id:MIME-Version:Content-Type:To:Cc; b=n1eJeeBwu/+bQUr+blI8urT0sbjK2P4wqplSxjwLkLrO1j/9aQlnoZx77aI2GfNIRJmPTZdYVUQag9B80JOTiOPfOi0+LogyEPJQ9Y6werGkjXP8fPhXOOdAaI2+1X6wJm9/QdbMHv1UGtY+W65N5rB95JQX3pTOFXYQ0YkVzXs= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.dev; spf=pass smtp.mailfrom=linux.dev; dkim=pass (1024-bit key) header.d=linux.dev header.i=@linux.dev header.b=JTbu5ChD; arc=none smtp.client-ip=95.215.58.176 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.dev Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=linux.dev Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linux.dev header.i=@linux.dev header.b="JTbu5ChD" X-Report-Abuse: Please report any abuse attempt to abuse@migadu.com and include these headers. DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linux.dev; s=key1; t=1780355084; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=fdOT1ubVljYo/8E3or6+JlpXdVVi9C39SjL7RbBhzUU=; b=JTbu5ChDEHc1Ha+ecWVBaCQpQlPo6d0ncrPhDvDiiXrtr5NBgcqPOaEBsW4ou+bVDM/o81 bOhieV2T8oBQKGrIbyLFN9v4junbavukpB7NAUr6aMw6FDzTpqRWoQFrBRum9QT9uRCov6 BC0B4tUGzrszlpR/aequhJjE5YNFbpM= From: Atish Patra Subject: [PATCH v2 0/4] KVM: Miscellaneous SEV/SNP related fixes Date: Mon, 01 Jun 2026 16:04:34 -0700 Message-Id: <20260601-sev_snp_fixes-v2-0-611891b28a86@meta.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit X-B4-Tracking: v=1; b=H4sIAAMQHmoC/12MwQ7CIBAFf6XZsxjAUMBT/8M0DdLVciht2IZoG v5dbOLF47yXmR0IU0CCa7NDwhwoLLGCPDXgJxefyMJYGSSXLVdSMcI8UFyHR3ghMX7XF22sF84 KqM6a8DiqcusrT4G2Jb2PfBbf9Vcyf6UsGGdjqx03QgmtbTfj5s5+maEvpXwAwCvtyakAAAA= To: Sean Christopherson , Paolo Bonzini , Borislav Petkov , Dave Hansen , x86@kernel.org, "H. Peter Anvin" , Tom Lendacky , Peter Gonda , Brijesh Singh , Youngjae Lee , Ashish Kalra , Michael Roth , John Allen , Herbert Xu Cc: clm@meta.com, kvm@vger.kernel.org, linux-kernel@vger.kernel.org, linux-crypto@vger.kernel.org, stable@vger.kernel.org, Atish Patra , Sashiko X-Migadu-Flow: FLOW_OUT This series addresses a few issues found during code audit of the KVM SEV/SNP and CCP driver code. The fixes include a incorrect lock state and incomplete state handling during intra-host migration for SNP VMs. To: Sean Christopherson To: Paolo Bonzini To: Borislav Petkov To: Dave Hansen To: x86@kernel.org To: H. Peter Anvin To: Tom Lendacky To: Peter Gonda To: Brijesh Singh To: Youngjae Lee To: Ashish Kalra To: Michael Roth To: John Allen To: Herbert Xu Cc: clm@meta.com Cc: kvm@vger.kernel.org Cc: linux-kernel@vger.kernel.org Cc: linux-crypto@vger.kernel.org Cc: stable@vger.kernel.org Signed-off-by: Atish Patra --- Changes in v2: - Added fixes based on the reports by Sashiko. - Added a kselftest for validating SNP VM mirroring/migration rejection. - Link to v1: https://lore.kernel.org/r/20260528-sev_snp_fixes-v1-0-d67a08151779@meta.com --- Atish Patra (4): KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs KVM: selftests: Verify SNP VMs are rejected from migration and mirroring crypto: ccp: Fix possible deadlock in SEV init failure path crypto: ccp: Fix memory leak in SEV INIT_EX path arch/x86/kvm/svm/sev.c | 4 +- drivers/crypto/ccp/sev-dev.c | 18 +++++++-- .../testing/selftests/kvm/x86/sev_migrate_tests.c | 47 ++++++++++++++++++++++ 3 files changed, 65 insertions(+), 4 deletions(-) --- base-commit: e7ae89a0c97ce2b68b0983cd01eda67cf373517d change-id: 20260525-sev_snp_fixes-0b73789c1a91 Best regards, -- Atish Patra