From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pdx-out-015.esa.us-west-2.outbound.mail-perimeter.amazon.com (pdx-out-015.esa.us-west-2.outbound.mail-perimeter.amazon.com [50.112.246.219]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 56B1632D0CC; Thu, 25 Jun 2026 22:05:40 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=50.112.246.219 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782425141; cv=none; b=r2KG1wtdg6WiRUtXfeuaqWE3pAoWFSt/R1T6qk5Onaj84AIn2r5ggE08TFJr+ASqQH/s2hjMWmrh1bhh8pzNxMLSq3CpppUCv97B5Zl7UnGySXelkCOjtERBTVFhg8xmRIDu/uvdZsalPKLWnSnl4RxwJPT+AMWBswNvHQZ/rKU= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1782425141; c=relaxed/simple; bh=o9784fq5H0vKbEhs9q1nhq9qzCGvGCXr6nkGiH4HQdY=; h=From:To:CC:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=KMoKXyj7U1mpEhyk7yD82QHxAZrbpBlMOIF8IAFqX1cdY4jU5qM3gEhksw2o0/j1W5UGD2dLBIV1M6E6O1BzfrFgtIHPKGwcwBXbu2ogFN1O70+eFFKtyKkgI1aFF/o+PR3lgpeTdMjKaFdl9AGHlKdsxChgABLvoRwicvj7rEc= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amazon.com; spf=pass smtp.mailfrom=amazon.com; dkim=pass (2048-bit key) header.d=amazon.com header.i=@amazon.com header.b=cTiLefe6; arc=none smtp.client-ip=50.112.246.219 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amazon.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=amazon.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=amazon.com header.i=@amazon.com header.b="cTiLefe6" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.com; i=@amazon.com; q=dns/txt; s=amazoncorp2; t=1782425140; x=1813961140; h=from:to:cc:subject:date:message-id:in-reply-to: references:mime-version:content-transfer-encoding; bh=aoFONVOhyScoEnWz8QaO9D6p4/Oi64chHMt1wSu33gc=; b=cTiLefe6/DYCYR3q7uTSE26YwktRd1kRams/NBt0FfbJRUJnJJhJiQh7 +A9ubVMquTU17nkxE1F56nT4PtUIih4LEZ9H4eOO7MS3j+QSdKDEFdfUC f3Aw/GWE5gutnqzy6PiWBbKGZH3BT+eGO4FlLFIe4NP7B8MUR0oD70528 NUzVmV+5NbcSHT4+uwLp3GvGCpSQaOj+J8vg7u63UTCJYatwVQAM9OOra 1aaLgOK4SqCRlYoZFJorYt+wwTwAfh96ITCMicZUykXh1KMHTdWTy8TYM YXtGKVrZh5aw+CODeNztpvWBfu61lf8Iv/URK34J0DCkTTD+EO/DzASzY w==; X-CSE-ConnectionGUID: IIl9M7GQTKKu5hd2UILYNA== X-CSE-MsgGUID: b6Hm8G91T5az+AqzX1mSWA== X-IronPort-AV: E=Sophos;i="6.24,225,1774310400"; d="scan'208";a="22325959" Received: from ip-10-5-9-48.us-west-2.compute.internal (HELO smtpout.naws.us-west-2.prod.farcaster.email.amazon.dev) ([10.5.9.48]) by internal-pdx-out-015.esa.us-west-2.outbound.mail-perimeter.amazon.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 25 Jun 2026 22:05:40 +0000 Received: from EX19MTAUWB002.ant.amazon.com [205.251.233.48:30621] by smtpin.naws.us-west-2.prod.farcaster.email.amazon.dev [10.0.52.142:2525] with esmtp (Farcaster) id ec50139c-a60b-49fe-b7e2-85f290cfb846; Thu, 25 Jun 2026 22:05:39 +0000 (UTC) X-Farcaster-Flow-ID: ec50139c-a60b-49fe-b7e2-85f290cfb846 Received: from EX19D001UWA001.ant.amazon.com (10.13.138.214) by EX19MTAUWB002.ant.amazon.com (10.250.64.231) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.2.2562.43; Thu, 25 Jun 2026 22:05:39 +0000 Received: from 6c7e67c92ceb.amazon.com (10.187.171.24) by EX19D001UWA001.ant.amazon.com (10.13.138.214) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA) id 15.2.2562.43; Thu, 25 Jun 2026 22:05:39 +0000 From: Nathan Gao To: CC: , , , , , , , Subject: Re: stable backports for "KVM: x86: Fix shadow paging use-after-free due to unexpected GFN" Date: Thu, 25 Jun 2026 15:04:37 -0700 Message-ID: <20260625220437.52368-1-zcgao@amazon.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: EX19D041UWB003.ant.amazon.com (10.13.139.176) To EX19D001UWA001.ant.amazon.com (10.13.138.214) Thanks Paolo! I tested these in the context of Amazon Linux, carrying the series as a downstream patch set on top of our 5.10 and 5.15 trees, as follows. Test setup - Trees: Amazon Linux 5.10 and 5.15, with the backports applied as downstream patches. (For 5.10, applied a83e50d86^..d3d0e6688; for 5.15, applied 4db658c99^..1ab8cd246) - For each tree we ran with EPT enabled and disabled, i.e. sudo rmmod kvm_intel && sudo modprobe kvm_intel ept=0 and confirmed via /sys/module/kvm_intel/parameters/ept. - Tested with AWS EC2 c5.metal. Tests - KVM selftests: make -C tools/testing/selftests/kvm run_tests - kvm-unit-tests: https://www.linux-kvm.org/page/KVM-unit-tests For each (tree x EPT setting) we collected results before and after applying the backport and compared them. Results - No regressions. On both 5.10 and 5.15, and with EPT on and off, the test outcomes are the same before and after the backport. - kvm-unit-tests output was identical before vs. after. - The KVM selftest verdicts (ok/not ok) were identical before vs. after. The handful of failing tests are pre-existing on our baseline and unrelated to the MMU change (e.g. debug_regs, vmx_pmu_msrs_test, a memslot_perf_test timeout, etc.). So from these tests, the backport looks good. Please let me know if there are any other tests I can help with. Tested-by: Nathan Gao Thanks, Nathan Gao