[PATCH 00/11] KVM: fix issues with stale control fields

[Paolo Bonzini <pbonzini@redhat.com>]

Fix two bugs where the guest could do stupid things on purpose to
cause problems in the host.

Patches 1-5 cover cases where actions done through VMCB control fields
have to be redone if VMRUN fails.  In particular, failed VMRUNs can
cause pending TLB flushes to be dropped.

Patch 6 fixes a case where eVMCS execution controls can cause the
host to use a stale MSR permission bitmap.  Patches 7-11 are tests
for nested x2APIC; don't run them on an unpatched kernel.

Paolo

Sean Christopherson (11):
  KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed
    VMRUN
  KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN
    succeeded
  KVM: SVM: Don't mark ASID fields as dirty when setting control.tlb_ctl
  KVM: SVM: Sync guest's PERF_CNTR_GLOBAL_CTL from h/w only on
    successful VMRUN
  KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is
    intercepted
  KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are
    modified
  KVM: selftests: Add x2APIC MSR test for inhibiting APICv while nested
  KVM: selftests: Run the nested x2APIC with and without APICv being
    inhibited in L2
  KVM: selftests: Verify that L0's TPR doesn't get clobbered
  KVM: selftests: Extend nested x2APIC test to validate disabling x2APIC
    virt
  KVM: selftests: Extend nested x2APIC test to validate using eVMCS for
    vmcs12

 arch/x86/kvm/svm/sev.c                        |   1 -
 arch/x86/kvm/svm/svm.c                        |  43 ++--
 arch/x86/kvm/svm/svm.h                        |   1 +
 arch/x86/kvm/vmx/nested.c                     |   6 +
 tools/testing/selftests/kvm/Makefile.kvm      |   1 +
 .../selftests/kvm/x86/nested_x2apic_test.c    | 235 ++++++++++++++++++
 6 files changed, 263 insertions(+), 24 deletions(-)
 create mode 100644 tools/testing/selftests/kvm/x86/nested_x2apic_test.c

-- 
2.52.0