From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from abb.hmeau.com (abb.hmeau.com [180.181.231.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 17F2DDF59; Mon, 13 Jul 2026 03:35:45 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=180.181.231.80 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783913748; cv=none; b=qKBD2660yiiSR5C869Dvk09qiUcGvJ6zBymUjfFYT7/waALeZzWpbOupq77waQVk3h1dQc1l/XSi4NevbF1R5wpMjtnw9oNP50Pusdmg0rIs2a0vY2UDc3Kk0ZFoEIFfCKsSF7g+64XesSQtlMXB1ymmf0Qaty/+k1hTyv9Cv9s= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783913748; c=relaxed/simple; bh=49dJJ0Sp0/vn4DmKvNUpSlyKySCDpPlXsdYOeRJpe58=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=g5iHBPHnbaBlqTHLduh9FcsQY8UO2A3tYxWhJhufrEoaTUV4o+j6LZo4eAfpOXRBaFlvvdoeEk7vroFyGbRYsUCGDBrduXGxFO4ik772UvuB6q6LzeDSuBg/Y7MUTDUUqMMW9G46vDsrV1SM5NjuNfGpRhSBcH7FwWfCbkzjHO4= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=gondor.apana.org.au; spf=pass smtp.mailfrom=gondor.apana.org.au; dkim=pass (2048-bit key) header.d=gondor.apana.org.au header.i=@gondor.apana.org.au header.b=f8Nb/KWG; arc=none smtp.client-ip=180.181.231.80 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=gondor.apana.org.au Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gondor.apana.org.au Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gondor.apana.org.au header.i=@gondor.apana.org.au header.b="f8Nb/KWG" DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gondor.apana.org.au; s=h01; h=In-Reply-To:Content-Type:MIME-Version: References:Message-ID:Subject:Cc:To:From:Date:cc:to:subject:message-id:date: from:content-type:reply-to; bh=IJLs1QJf2eols2ajMEIJIevnH0XW0XzUVPHUmDnAlwc=; b=f8Nb/KWG1PDLnMBNVfqwzNcphoYwOETjw10pBXJnzZOPjl4EE/ZRRxVU21fVhj6Qkmz0XurYmJS YwYAh2IIAmUZI8Zb53ngipfncxOdSt3D3L1DAoG6F67YLcJWIot4OihsUQo15O9tC5NRZfWRNQvW6 m9bS0i1JXZmd3paJ+xkB+rLK77a57J/WuqcYROeLKPU9YT3fru9bXMseF3Cpm/A+fecDOsENdTS9m Gfngm10iDSZ1Wyv4nlNLtssLBJyUWtbAQSioUcNlMMTaIwfsImrwYOZV5ISUTdQs3gzUqNZunCunc tlmR2QyEJ80FpV7/EUwkGI9pMrrx7Lzd6now==; Received: from loth.rohan.me.apana.org.au ([192.168.167.2]) by formenos.hmeau.com with smtp (Exim 4.98.2 #2 (Debian)) id 1wj7S0-0000000CyCJ-3h8m; Mon, 13 Jul 2026 11:35:25 +0800 Received: by loth.rohan.me.apana.org.au (sSMTP sendmail emulation); Mon, 13 Jul 2026 13:35:24 +1000 Date: Mon, 13 Jul 2026 13:35:24 +1000 From: Herbert Xu To: Atish Patra Cc: Sean Christopherson , Paolo Bonzini , Borislav Petkov , Dave Hansen , x86@kernel.org, "H. Peter Anvin" , Tom Lendacky , Peter Gonda , Brijesh Singh , Youngjae Lee , Ashish Kalra , Michael Roth , John Allen , clm@meta.com, kvm@vger.kernel.org, linux-kernel@vger.kernel.org, linux-crypto@vger.kernel.org, stable@vger.kernel.org, Atish Patra , Sashiko Subject: Re: [PATCH v3 0/4] KVM: Miscellaneous SEV/SNP related fixes Message-ID: References: <20260602-sev_snp_fixes-v3-0-24bfd3ae047c@meta.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20260602-sev_snp_fixes-v3-0-24bfd3ae047c@meta.com> On Tue, Jun 02, 2026 at 03:36:31PM -0700, Atish Patra wrote: > This series addresses a few issues found during code audit of the > KVM SEV/SNP and CCP driver code. The fixes include a incorrect lock state > and incomplete state handling during intra-host migration for SNP VMs. > > To: Sean Christopherson > To: Paolo Bonzini > To: Borislav Petkov > To: Dave Hansen > To: x86@kernel.org > To: H. Peter Anvin > To: Tom Lendacky > To: Peter Gonda > To: Brijesh Singh > To: Youngjae Lee > To: Ashish Kalra > To: Michael Roth > To: John Allen > To: Herbert Xu > Cc: clm@meta.com > Cc: kvm@vger.kernel.org > Cc: linux-kernel@vger.kernel.org > Cc: linux-crypto@vger.kernel.org > Cc: stable@vger.kernel.org > > Signed-off-by: Atish Patra > --- > Changes in v3: > - Added comments, fixed commit messages and fixes tag as per discussions on v2. > - sev_init_ex_buffer initialized with zero at allocation to prevent any kernel > data leak in case of init_ex_file is not present. Reported by Sashiko > - Link to v2: https://lore.kernel.org/r/20260601-sev_snp_fixes-v2-0-611891b28a86@meta.com > > Changes in v2: > - Added fixes based on the reports by Sashiko. > - Added a kselftest for validating SNP VM mirroring/migration rejection. > - Link to v1: https://lore.kernel.org/r/20260528-sev_snp_fixes-v1-0-d67a08151779@meta.com > > --- > Atish Patra (4): > KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs > KVM: selftests: Verify SNP VMs are rejected from migration and mirroring > crypto: ccp: Fix possible deadlock in SEV init failure path > crypto: ccp: Fix memory leak in SEV INIT_EX path > > arch/x86/kvm/svm/sev.c | 6 ++- > drivers/crypto/ccp/sev-dev.c | 19 +++++++-- > .../testing/selftests/kvm/x86/sev_migrate_tests.c | 47 ++++++++++++++++++++++ > 3 files changed, 67 insertions(+), 5 deletions(-) > --- > base-commit: e7ae89a0c97ce2b68b0983cd01eda67cf373517d > change-id: 20260525-sev_snp_fixes-0b73789c1a91 Patches 3-4 applied. Thanks. -- Email: Herbert Xu Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt