Received: by 10.223.176.5 with SMTP id f5csp2367437wra; Sun, 28 Jan 2018 19:02:02 -0800 (PST) X-Google-Smtp-Source: AH8x2248mPdwT0GR6qA5h/Nb16Y8zrCHdQfM7P4WjQV+ceR3C8A4mpTKETy3bQdvGf/joP5JMz9S X-Received: by 10.101.92.9 with SMTP id u9mr20332161pgr.440.1517194921643; Sun, 28 Jan 2018 19:02:01 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1517194921; cv=none; d=google.com; s=arc-20160816; b=cRW46vqyKw6YEgjoft5ShCmbg3WmfNQtvsotZ4yzzqAOpK9NEYpdjmdtACw+nyiD/s zK+/1rt4bMLAg4Z7wXzqY4/X2jcNU0LmUjyl0izpEEuVY5hF57GbTtnWwSDgGNN1hHqp IMAXWg91RdwgAhKayn95FM/xcMSkLnKvj3mX/37xn+sB2Td6r08AtYhcaIkRaAlbztCF V+q+8R6chqzNRakZXp1RYjIKYg0SJ2b9VUN6iaZqcjfOrPSvQAxx0Ge6kFLPcFPG3P0l WZhXsB/Knz6onPPwJBbk3rC9N3toUP0c5wJVD8djqD+lYLMVfdK6vA5WYV0xyMWriArT PE5w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding:mime-version :message-id:date:subject:cc:to:from:dkim-signature :arc-authentication-results; bh=A+Oz+KcXHydlKNahSvCvbr92Yyi2+Tfi6/enC9KI488=; b=DTweSVIJ9giAiH5q3gBH1aHjzf7NZxD+t1phFC7wctihMy1v0/9iXKgya+eIdm707S aYpYFJT/GEPyHF/QHZrg8NvvYE0ROUxeLh8SGSmocI9MckQzU2qcZxT0EdwMwcPHuTUw Jy+u3K8lt99bCMP7Ya1nFSEycOiccHswY5d0LUEN697XKJEKzM1Blztq2UJtXjSA14qb 4UZAMTmyzXgTFeDYBw5ZhGTEE4CMoaYi0r9M9hccpt3RiF9CSaMriOCm7ROZpmccKN8g NZSVvzVvs7N4fYupWFhUpfqtwDvAewo3Xmw2nYwxj6UAKIpao+vuFu/dMrposdlAGxY6 WOEA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@amazon.de header.s=amazon201209 header.b=hU+c3Hlw; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=amazon.de Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id b7si6557909pgq.275.2018.01.28.19.01.47; Sun, 28 Jan 2018 19:02:01 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; dkim=pass header.i=@amazon.de header.s=amazon201209 header.b=hU+c3Hlw; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=QUARANTINE sp=QUARANTINE dis=NONE) header.from=amazon.de Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754574AbeA2BAm (ORCPT + 99 others); Sun, 28 Jan 2018 20:00:42 -0500 Received: from smtp-fw-33001.amazon.com ([207.171.190.10]:2893 "EHLO smtp-fw-33001.amazon.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753502AbeA2BAk (ORCPT ); Sun, 28 Jan 2018 20:00:40 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amazon.de; i=@amazon.de; q=dns/txt; s=amazon201209; t=1517187640; x=1548723640; h=from:to:cc:subject:date:message-id:mime-version: content-transfer-encoding; bh=A+Oz+KcXHydlKNahSvCvbr92Yyi2+Tfi6/enC9KI488=; b=hU+c3Hlw5DtjeSl4Wq5x8XOb4tSWMsih39HwnvWtIPWAvIPfKCMpbslr cS8docODW/t0Xsjr5/XSCTa/ZQR4cxRYTL5eeLGrWesDEAkbiG41/Tzw1 OSAojS1/xuDQ3d99J0/NFGLHjkXWTDpA2vXJ7v8Prvu9Uwq1/bjFHEavm g=; X-IronPort-AV: E=Sophos;i="5.46,428,1511827200"; d="scan'208";a="717361300" Received: from sea3-co-svc-lb6-vlan2.sea.amazon.com (HELO email-inbound-relay-2a-f14f4a47.us-west-2.amazon.com) ([10.47.22.34]) by smtp-border-fw-out-33001.sea14.amazon.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 29 Jan 2018 00:59:31 +0000 Received: from u54e1ad5160425a4b64ea.ant.amazon.com (pdx2-ws-svc-lb17-vlan3.amazon.com [10.247.140.70]) by email-inbound-relay-2a-f14f4a47.us-west-2.amazon.com (8.14.7/8.14.7) with ESMTP id w0T0xLB6128309 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 29 Jan 2018 00:59:23 GMT Received: from u54e1ad5160425a4b64ea.ant.amazon.com (localhost [127.0.0.1]) by u54e1ad5160425a4b64ea.ant.amazon.com (8.15.2/8.15.2/Debian-3) with ESMTP id w0T0xHQ0032435; Mon, 29 Jan 2018 01:59:18 +0100 Received: (from karahmed@localhost) by u54e1ad5160425a4b64ea.ant.amazon.com (8.15.2/8.15.2/Submit) id w0T0xDJc032431; Mon, 29 Jan 2018 01:59:13 +0100 From: KarimAllah Ahmed To: kvm@vger.kernel.org, linux-kernel@vger.kernel.org, x86@kernel.org Cc: KarimAllah Ahmed , Andi Kleen , Andrea Arcangeli , Andy Lutomirski , Arjan van de Ven , Ashok Raj , Asit Mallick , Borislav Petkov , Dan Williams , Dave Hansen , David Woodhouse , Greg Kroah-Hartman , "H . Peter Anvin" , Ingo Molnar , Janakarajan Natarajan , Joerg Roedel , Jun Nakajima , Laura Abbott , Linus Torvalds , Masami Hiramatsu , Paolo Bonzini , Peter Zijlstra , =?UTF-8?q?Radim=20Kr=C4=8Dm=C3=A1=C5=99?= , Thomas Gleixner , Tim Chen , Tom Lendacky Subject: [PATCH v2 0/4] KVM: Expose speculation control feature to guests Date: Mon, 29 Jan 2018 01:58:48 +0100 Message-Id: <1517187532-32286-1-git-send-email-karahmed@amazon.de> X-Mailer: git-send-email 2.7.4 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Add direct access to speculation control MSRs for KVM guests. This allows the guest to protect itself against Spectre V2 using IBRS+IBPB instead of a retpoline+IBPB based approach. It also exposes the ARCH_CAPABILITIES MSR which is going to be used by future Intel processors to indicate RDCL_NO and IBRS_ALL. Ashok Raj (1): x86/kvm: Add IBPB support KarimAllah Ahmed (3): x86: kvm: Update the reverse_cpuid list to include CPUID_7_EDX x86: vmx: Allow direct access to MSR_IA32_SPEC_CTRL x86: vmx: Allow direct access to MSR_IA32_ARCH_CAPABILITIES arch/x86/kvm/cpuid.c | 6 ++++- arch/x86/kvm/cpuid.h | 1 + arch/x86/kvm/svm.c | 14 +++++++++++ arch/x86/kvm/vmx.c | 71 ++++++++++++++++++++++++++++++++++++++++++++++++++++ arch/x86/kvm/x86.c | 1 + 5 files changed, 92 insertions(+), 1 deletion(-) Cc: Andi Kleen Cc: Andrea Arcangeli Cc: Andy Lutomirski Cc: Arjan van de Ven Cc: Ashok Raj Cc: Asit Mallick Cc: Borislav Petkov Cc: Dan Williams Cc: Dave Hansen Cc: David Woodhouse Cc: Greg Kroah-Hartman Cc: H. Peter Anvin Cc: Ingo Molnar Cc: Janakarajan Natarajan Cc: Joerg Roedel Cc: Jun Nakajima Cc: Laura Abbott Cc: Linus Torvalds Cc: Masami Hiramatsu Cc: Paolo Bonzini Cc: Peter Zijlstra Cc: Radim Krčmář Cc: Thomas Gleixner Cc: Tim Chen Cc: Tom Lendacky Cc: kvm@vger.kernel.org Cc: linux-kernel@vger.kernel.org Cc: x86@kernel.org -- 2.7.4