]> git.ipfire.org Git - thirdparty/linux.git/commit
KVM: nSVM: WARN and abort vmcb02 intercepts recalc if vmcb02 isn't active
authorYosry Ahmed <yosry.ahmed@linux.dev>
Wed, 18 Feb 2026 23:09:53 +0000 (15:09 -0800)
committerSean Christopherson <seanjc@google.com>
Thu, 5 Mar 2026 00:08:59 +0000 (16:08 -0800)
commita367b6e10372b46fa10debd889e89aa65ca65aee
tree6d08564e3b163351fb7a90a16ad620fdde608559
parent0b97f929831a70e7ad6d9dbd30ae1f65dd43526d
KVM: nSVM: WARN and abort vmcb02 intercepts recalc if vmcb02 isn't active

WARN and bail early from nested_vmcb02_recalc_intercepts() if vmcb02 isn't
the active/current VMCB, as recalculating intercepts for vmcb01 using logic
intended for merging vmcb12 and vmcb01 intercepts can yield unexpected and
unwanted results.

In addition to hardening against general bugs, this will provide additional
safeguards "if" nested_vmcb02_recalc_intercepts() is invoked directly from
nested_vmcb02_prepare_control().

Signed-off-by: Yosry Ahmed <yosry.ahmed@linux.dev>
[sean: split to separate patch, bail early on "failure"]
Link: https://patch.msgid.link/20260218230958.2877682-4-seanjc@google.com
Signed-off-by: Sean Christopherson <seanjc@google.com>
arch/x86/kvm/svm/nested.c