]> git.ipfire.org Git - thirdparty/linux.git/commit
x86/sev: Use the SVSM to create a vCPU when not in VMPL0
authorTom Lendacky <thomas.lendacky@amd.com>
Wed, 5 Jun 2024 15:18:48 +0000 (10:18 -0500)
committerBorislav Petkov (AMD) <bp@alien8.de>
Mon, 17 Jun 2024 18:42:56 +0000 (20:42 +0200)
commitd2b2931f19e48c9148909c2f45bccf21a8a83cfb
tree40a86fb741fd28ddccdbd5d67c3f74fd34d5b0a7
parentfcd042e86422442f999feae96f34a408555be248
x86/sev: Use the SVSM to create a vCPU when not in VMPL0

Using the RMPADJUST instruction, the VMSA attribute can only be changed
at VMPL0. An SVSM will be present when running at VMPL1 or a lower
privilege level.

In that case, use the SVSM_CORE_CREATE_VCPU call or the
SVSM_CORE_DESTROY_VCPU call to perform VMSA attribute changes. Use the
VMPL level supplied by the SVSM for the VMSA when starting the AP.

  [ bp: Fix typo + touchups. ]

Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Link: https://lore.kernel.org/r/bcdd95ecabe9723673b9693c7f1533a2b8f17781.1717600736.git.thomas.lendacky@amd.com
arch/x86/include/asm/sev.h
arch/x86/kernel/sev.c