diff options
| author | Quentin Perret <[email protected]> | 2022-11-10 19:02:54 +0000 |
|---|---|---|
| committer | Marc Zyngier <[email protected]> | 2022-11-11 17:19:35 +0000 |
| commit | fe41a7f8c0ee3ee2f682f8c28c7e1c5ff2be8a79 (patch) | |
| tree | 529006eec25af79e441fe48185b068e7714416bb /arch/arm64/include/asm/kvm_hyp.h | |
| parent | f41dff4efb918db68923a826e966ca62c7c8e929 (diff) | |
KVM: arm64: Unmap 'kvm_arm_hyp_percpu_base' from the host
When pKVM is enabled, the hypervisor at EL2 does not trust the host at
EL1 and must therefore prevent it from having unrestricted access to
internal hypervisor state.
The 'kvm_arm_hyp_percpu_base' array holds the offsets for hypervisor
per-cpu allocations, so move this this into the nVHE code where it
cannot be modified by the untrusted host at EL1.
Tested-by: Vincent Donnefort <[email protected]>
Signed-off-by: Quentin Perret <[email protected]>
Signed-off-by: Will Deacon <[email protected]>
Signed-off-by: Marc Zyngier <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Diffstat (limited to 'arch/arm64/include/asm/kvm_hyp.h')
0 files changed, 0 insertions, 0 deletions