From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=209.85.214.200 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1793395290; b=meH1qiJYePvMfpjCirK0GFq96c7IFEEv+/0xl0xpJCbf1eEJhSx4O8duRlALO4zXg9KS eMzDItVf3WOZeBKnRjoDrHm4GxhTnm4wGWToL+E1LD2QPlPtVHZbvFZsTCqjQo9Ow4Z5J s9+wZo+/ooARu7Gz57a3cnTy6ft+8XgKW3BBzEWTXG/LpA2ATggb8OmK9Ia3L1gy6it4n dqP+iVkgRhPWIgsB8zJCMKK0EDAazVeSzFNMa4QfkkruVut04+i8iiHwxjtAwCU/x1MJ7 qzS88o743nL48gFaEDnGxBFZ3sun59A8p8zh/J4MPpY3uMIMaZjAB46uBm/ZB2bfWMQ== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1793395290; h=DMARC-Filter:Received:DKIM-Signature:X-Google-DKIM-Signature: X-Forwarded-Encrypted:X-Gm-Message-State:X-Received:Reply-To:Date: In-Reply-To:Mime-Version:References:X-Mailer:Message-ID:Subject:From: To:Cc:Content-Type; bh=iFN1OdobNZOI9Kqr8g7DQiTe1TY1BZi1PiVwsL0/XKQ=; b=CxZia+66fY/FS8363hTALJD+393emDN2D2wZtvHPx+xwdsyoCUCyRjrhBqrLnoATa4a9 Amc0Bjc69wgxq89BZvD38guWc2ZeVNLN4z8hio9zyhKpZWkMBw49ZfJVhJU+BuHRlRWyb yWgPfuecFkdEQKZj9UYEh10MzTgX/wXa/nnxukeJAzm/vXgxPVIuw15JxPiFoLMoO/JA8 mBhTpgIOsTg334egZBNGFr9gY4Gufa5hn1vHmOM3Su5hf8RbS5MLqSh5hk4w10agmkmD3 9X2NPp2FyYcwh22Od/L1VZYhoGH8GORXmoC815vtXL4QuUEf029CAM6Pbd6gHVsDpqA== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass header.from=google.com; spf=pass smtp.mailfrom=flex--seanjc.bounces.google.com; dkim=pass header.d=google.com header.i=@google.com header.a=rsa-sha256 header.s=20260707 header.b=Jp7jpYEd; arc=none smtp.remote-ip=209.85.214.200 Received: from mail-pl1-f200.google.com (mail-pl1-f200.google.com [209.85.214.200]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 1FCF5606C33B for ; Fri, 30 Oct 2026 21:21:30 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org 1FCF5606C33B Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--seanjc.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key, unprotected) header.d=google.com header.i=@google.com header.a=rsa-sha256 header.s=20260707 header.b=Jp7jpYEd Received: by mail-pl1-f200.google.com with SMTP id d9443c01a7336-2ea71803effso12553935ad.3 for ; Fri, 30 Oct 2026 14:21:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20260707; t=1793395289; x=1794000089; darn=vger.kernel.org; h=content-type:cc:to:from:subject:message-id:references:mime-version :in-reply-to:date:reply-to:from:to:cc:subject:date:message-id :reply-to:content-type; bh=iFN1OdobNZOI9Kqr8g7DQiTe1TY1BZi1PiVwsL0/XKQ=; b=Jp7jpYEdDT79nweNwXIEayZNamkfQplMNHyoZon/zGYI42Kx3k2nzUy761WieypIp9 sB17ZowmsECNFdGhrpN4ijT7Khw97hoLh822jw5Zo383kvZbca/LA+AIbWhz/oLI4XtG P6TS2vvSHVZReEOJn3SAveuzoGHrv7kOZ1dktyH0I/hZs5oSV7roSxMcc2QiAoNViVtV 8HO+pKtAfrN7+hz2SSKtur6oitzImSUkR1bWK/5MYbbfT/vwPZHvgvV6mb9YQ5JlB+wN bM0UOYtXqnM9Sjmh/j4MS2bZkIbqh1vjMZL0CAyoAXn/Xla+Kf/8u609GwtlhQFp6M3g Od0Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1793395289; x=1794000089; h=content-type:cc:to:from:subject:message-id:references:mime-version :in-reply-to:date:reply-to:x-gm-message-state:from:to:cc:subject :date:message-id:reply-to:content-type; bh=iFN1OdobNZOI9Kqr8g7DQiTe1TY1BZi1PiVwsL0/XKQ=; b=WHQh8BinifokpWBmvKbiky7CQsjtkpT4pztjWey0b6zbmLH4vLUFDVRmzb98Q+R7u5 owDAKXhh8m8uV+cghB3OdBhrJjuETFBuRcZcb1o+QkKkj2/KjIpfe+GNlfYDZBfI3tnV D+oxrO5plq+LTDiZOb2uxjxCgHDQxpqyMa+tmHNCVfCcV1iJOeolYQHgwVkbQxT/KDAd KF0DEJMW5eMuk3/P8cH2ZVZDw7Wuy+f+dwWZeH9W8zChuvJSNkLm5c8rsFabSu6ZJL1H 6gfAuczbLonCWGtFWnPM0cvJEB8OI8XVO+ZcXuvSxzA4Po29lcOqKVJiJXDwNCpwKSeI 9DgA== X-Forwarded-Encrypted: i=1; AKwUvBzB9B3+4uZ/aN7mExTeBEFCp6H198v2gSSYrdcJHxyxHl8/69BlpnpUpSqFHLaANYGg+uAR+ORgy4U6I+4=@vger.kernel.org X-Gm-Message-State: AFq9FYKgAXzDe01lBWZrFiW5cbk/TOumaBOv8UVwDW1i33wFF9M+pERE WcA3OXTBWe7RBHG2OGEpcEltNA7GkLwPF9quusn620vmyVApREyiHC8LjWk+5tVO9hA5wzge00j e+2z+cA== X-Received: from plsr11.prod.google.com ([2002:a17:902:be0b:b0:2ea:d63d:f2c5]) (user=seanjc job=prod-delivery.src-stubby-dispatcher) by 2002:a17:903:3804:b0:2ea:fb8b:258d with SMTP id d9443c01a7336-2eb36401e95mr37934335ad.6.1793395289485; Fri, 30 Oct 2026 14:21:29 -0700 (PDT) Reply-To: Sean Christopherson Date: Fri, 30 Oct 2026 14:21:01 -0700 In-Reply-To: <20261030212112.2598640-1-seanjc@google.com> X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list Mime-Version: 1.0 References: <20261030212112.2598640-1-seanjc@google.com> X-Mailer: git-send-email 2.56.0.385.gac671c819a-goog Message-ID: <20261030212112.2598640-14-seanjc@google.com> Subject: [PATCH v4 13/23] KVM: WARN if KVM attempts to do guest-related uaccess with "wrong" process From: Sean Christopherson To: Madhavan Srinivasan , Sean Christopherson , Paolo Bonzini Cc: Nicholas Piggin , linuxppc-dev@lists.ozlabs.org, kvm@vger.kernel.org, linux-kernel@vger.kernel.org, Jim Mattson , James Houghton , Chris Mason Content-Type: text/plain; charset="UTF-8" Now that memslots are torn down before kvm_arch_destroy_vm(), i.e. now that the massive, unaudited path that is known to have at least one rogue access to guest memory should be short-circuited before attempting to access user memory, WARN if KVM attempts to do a user access to guest memory with the wrong address space. Signed-off-by: Sean Christopherson --- include/linux/kvm_host.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/linux/kvm_host.h b/include/linux/kvm_host.h index be27b4e8f12d..f3f59bdf7e18 100644 --- a/include/linux/kvm_host.h +++ b/include/linux/kvm_host.h @@ -1355,7 +1355,7 @@ int kvm_gfn_to_hva_cache_init(struct kvm *kvm, struct gfn_to_hva_cache *ghc, static __always_inline __must_check bool kvm_can_do_uaccess(struct kvm *kvm) { - return current->mm == kvm->mm; + return !WARN_ON_ONCE(current->mm != kvm->mm); } #define BUILD_KVM_COPY_USER_WRAPPER(fn, to_user, from_user) \ -- 2.56.0.385.gac671c819a-goog