linux-toradex.git/arch/x86/include/uapi/asm/vmx.h, branch v4.4.35

KVM: x86: add pcommit support

2015-10-01T13:06:35+00:00

Pass PCOMMIT CPU feature to guest to enable PCOMMIT instruction

Currently we do not catch pcommit instruction for L1 guest and
allow L1 to catch this instruction for L2 if, as required by the spec,
L1 can enumerate the PCOMMIT instruction via CPUID:
| IA32_VMX_PROCBASED_CTLS2[53] (which enumerates support for the
| 1-setting of PCOMMIT exiting) is always the same as
| CPUID.07H:EBX.PCOMMIT[bit 22]. Thus, software can set PCOMMIT exiting
| to 1 if and only if the PCOMMIT instruction is enumerated via CPUID

The spec can be found at
https://software.intel.com/sites/default/files/managed/0d/53/319433-022.pdf

Signed-off-by: Xiao Guangrong 
Signed-off-by: Paolo Bonzini

kvm/x86: add support for MONITOR_TRAP_FLAG

2015-07-23T06:27:07+00:00

Allow a nested hypervisor to single step its guests.

Signed-off-by: Mihai Donțu 
[Fix overlong line. - Paolo]
Signed-off-by: Paolo Bonzini

KVM: nVMX: Add support for rdtscp

2015-03-27T01:33:48+00:00

If the guest CPU is supposed to support rdtscp and the host has rdtscp
enabled in the secondary execution controls, we can also expose this
feature to L1. Just extend nested_vmx_exit_handled to properly route
EXIT_REASON_RDTSCP.

Signed-off-by: Jan Kiszka 
Signed-off-by: Marcelo Tosatti

KVM: VMX: Add PML support in VMX

2015-01-30T08:39:54+00:00

This patch adds PML support in VMX. A new module parameter 'enable_pml' is added
to allow user to enable/disable it manually.

Signed-off-by: Kai Huang 
Reviewed-by: Xiao Guangrong 
Signed-off-by: Paolo Bonzini

KVM: nVMX: Add nested msr load/restore algorithm

2015-01-08T21:45:14+00:00

Several hypervisors need MSR auto load/restore feature.
We read MSRs from VM-entry MSR load area which specified by L1,
and load them via kvm_set_msr in the nested entry.
When nested exit occurs, we get MSRs via kvm_get_msr, writing
them to L1`s MSR store area. After this, we read MSRs from VM-exit
MSR load area, and load them via kvm_set_msr.

Signed-off-by: Wincy Van 
Signed-off-by: Paolo Bonzini

kvm: x86: handle XSAVES vmcs and vmexit

2014-12-05T12:57:33+00:00

Initialize the XSS exit bitmap.  It is zero so there should be no XSAVES
or XRSTORS exits.

Signed-off-by: Wanpeng Li 
Reviewed-by: Radim Krčmář 
Signed-off-by: Paolo Bonzini

kvm: vmx: handle invvpid vm exit gracefully

2014-10-24T11:21:17+00:00

On systems with invvpid instruction support (corresponding bit in
IA32_VMX_EPT_VPID_CAP MSR is set) guest invocation of invvpid
causes vm exit, which is currently not handled and results in
propagation of unknown exit to userspace.

Fix this by installing an invvpid vm exit handler.

This is CVE-2014-3646.

Cc: stable@vger.kernel.org
Signed-off-by: Petr Matousek 
Signed-off-by: Paolo Bonzini

KVM: x86: Update symbolic exit codes

2013-08-13T14:58:42+00:00

Add decoding for INVEPT and reorder the list according to the reason
numbers.

Signed-off-by: Jan Kiszka 
Signed-off-by: Paolo Bonzini

nEPT: Nested INVEPT

2013-08-07T13:57:42+00:00

If we let L1 use EPT, we should probably also support the INVEPT instruction.

In our current nested EPT implementation, when L1 changes its EPT table
for L2 (i.e., EPT12), L0 modifies the shadow EPT table (EPT02), and in
the course of this modification already calls INVEPT. But if last level
of shadow page is unsync not all L1's changes to EPT12 are intercepted,
which means roots need to be synced when L1 calls INVEPT. Global INVEPT
should not be different since roots are synced by kvm_mmu_load() each
time EPTP02 changes.

Reviewed-by: Xiao Guangrong 
Signed-off-by: Nadav Har'El 
Signed-off-by: Jun Nakajima 
Signed-off-by: Xinhao Xu 
Signed-off-by: Yang Zhang 
Signed-off-by: Gleb Natapov 
Signed-off-by: Paolo Bonzini

KVM: nVMX: Add preemption timer support

2013-03-14T08:01:21+00:00

Provided the host has this feature, it's straightforward to offer it to
the guest as well. We just need to load to timer value on L2 entry if
the feature was enabled by L1 and watch out for the corresponding exit
reason.

Reviewed-by: Paolo Bonzini 
Signed-off-by: Jan Kiszka 
Signed-off-by: Gleb Natapov