patches/kernel/0293-KVM-SVM-Do-not-intercept-new-speculative-control-MSR.patch

   1 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
   2 From: Tom Lendacky <thomas.lendacky@amd.com>
   3 Date: Wed, 20 Dec 2017 10:55:47 +0000
   4 Subject: [PATCH] KVM: SVM: Do not intercept new speculative control MSRs
   5 MIME-Version: 1.0
   6 Content-Type: text/plain; charset=UTF-8
   7 Content-Transfer-Encoding: 8bit
   8
   9 CVE-2017-5753
  10 CVE-2017-5715
  11
  12 Allow guest access to the speculative control MSRs without being
  13 intercepted.
  14
  15 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
  16 Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
  17 Signed-off-by: Andy Whitcroft <apw@canonical.com>
  18 Signed-off-by: Kleber Sacilotto de Souza <kleber.souza@canonical.com>
  19 (cherry picked from commit ccaa77a824fd3e21f0b8ae6b5a66fc1ee7e35b14)
  20 Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
  21 ---
  22  arch/x86/kvm/svm.c | 2 ++
  23  1 file changed, 2 insertions(+)
  24
  25 diff --git a/arch/x86/kvm/svm.c b/arch/x86/kvm/svm.c
  26 index 92cd94d51e1f..94adf6becc2e 100644
  27 --- a/arch/x86/kvm/svm.c
  28 +++ b/arch/x86/kvm/svm.c
  29 @@ -248,6 +248,8 @@ static const struct svm_direct_access_msrs {
  30         { .index = MSR_CSTAR,                           .always = true  },
  31         { .index = MSR_SYSCALL_MASK,                    .always = true  },
  32  #endif
  33 +       { .index = MSR_IA32_SPEC_CTRL,                  .always = true },
  34 +       { .index = MSR_IA32_PRED_CMD,                   .always = true },
  35         { .index = MSR_IA32_LASTBRANCHFROMIP,           .always = false },
  36         { .index = MSR_IA32_LASTBRANCHTOIP,             .always = false },
  37         { .index = MSR_IA32_LASTINTFROMIP,              .always = false },
  38 --
  39 2.14.2
  40