tree 627f36cae2f6e2c47e361cbc635f0acd42fe8a12
parent b8d723f1a43195fb77d24f9ba3f0d28a4fb0b9b9
author Joerg Roedel <jroedel@suse.de> 1687362162 +0200
committer He Gao <hegao@google.com> 1699566979 +0000

x86/sev: Check IOBM for IOIO exceptions from user-space

Upstream commit: b9cb9c45583b911e0db71d09caa6b56469eb2bdf

Check the IO permission bitmap (if present) before emulating IOIO #VC
exceptions for user-space. These permissions are checked by hardware
already before the #VC is raised, but due to the VC-handler decoding
race it needs to be checked again in software.

Cherry-pick to release branch to fix CVE-2023-46813.

BUG=b/309761738
TEST=presubmit
RELEASE_NOTE=None

Fixes: 25189d08e516 ("x86/sev-es: Add support for handling IOIO exceptions")
Reported-by: Tom Dohrmann <erbse.13@gmx.de>
Change-Id: I15520b6f44359bc21914d8ec3c8c00cb7748df89
Signed-off-by: Joerg Roedel <jroedel@suse.de>
Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Tested-by: Tom Dohrmann <erbse.13@gmx.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/60996
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Nandhini Rengaraj <nrengaraj@google.com>