Received: by 2002:ab2:3b09:0:b0:1ed:14ea:9113 with SMTP id b9csp156935lqc; Thu, 29 Feb 2024 13:13:41 -0800 (PST) X-Forwarded-Encrypted: i=3; AJvYcCWi53oKbikYpIv+frRuEtjEuHTzeQD8ea7z51+78edUadNxmxnoYWRR8aaznNqgnHxLc2cWli6pH4FZu77YQEi8Dg2cAJFq92XF+Fdt6w== X-Google-Smtp-Source: AGHT+IGD1NxRZluU+OUHf83OebPc5kI2/Xps/UtO6NJsfpwD1yc8zKT0m8tbbmftDT8pw28PxKP3 X-Received: by 2002:a17:902:f813:b0:1dc:bcb3:f552 with SMTP id ix19-20020a170902f81300b001dcbcb3f552mr3027317plb.66.1709241220566; Thu, 29 Feb 2024 13:13:40 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1709241220; cv=pass; d=google.com; s=arc-20160816; b=LNKKfsGxWelDgrCWN3l0DvG7fmc2n7KTKgrRCKk7iHlMa+VYUJd91sB+d0qbPRQYTn 5R5rdD9jX6LrIZ+ADbKzZOMn4Zk56Pv07LWqv8oHHRTVHheAD+NrjiarhsaOowbXi1MR 3DtiMsm+uHs0FpyZbSgPuUMubJJQ/WPwYDWEMRXOcZP4VaxrdLcJniuKWHaRVtX8L4ce Uk2wTgO8kE7bzgTB/M4dj3KwKskb7mWvn6RKcXWZSHsLzz5+AhlhgLJQjzsxb0uxdrKY hArikPC1DtjUxsNSsk47RCttzl4i6yz2xTZja/0uGz6cMIbG0MQUVp1/UoNhvpnK0oTZ Zf9A== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:in-reply-to:autocrypt:from:references:cc :to:content-language:subject:user-agent:mime-version :list-unsubscribe:list-subscribe:list-id:precedence:date:message-id :dkim-signature; bh=pwC7w8RQ315Hy8ZjgqKPWOY3T5YPFeI5JvaDoZSl2GE=; fh=AUo6+E07uznF5eC/8XQwy3PmRXhVPrlzoi29/IH1X0E=; b=MZbpWKcpwBCK8jJL0ay1dYvVLaiaeglJHbb1t/GSDw+7UZVGzdb/gxmvoD4hqSUr4m 4jsJVltCwYbDpb9hDBJIBNgG7yp5dScLefu4xN38NjQCj6B4Pi1CHP9RLq0rlZWcRG+/ Xhct4R6hwLO4yNWHpQCZywYyjhjLm9BbOYXJmWd3y5+SusZq6GBkaaj0noEzZaFMr6Yb 3XAMex0DDUzx4V9rUJabLph9Qxdx7bRuXPEuuGxgi9rVftqAGLGs++XpIbcJAsDxlfoe UH35FIhFfg3LaJRbwj0hy4zW5Z30GgVqmrEqm/26oVhljCuspcgeCf50V4zoidy0HdOR PGRQ==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=FpoHLgzV; arc=pass (i=1 spf=pass spfdomain=redhat.com dkim=pass dkdomain=redhat.com dmarc=pass fromdomain=redhat.com); spf=pass (google.com: domain of linux-kernel+bounces-87531-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:45e3:2400::1 as permitted sender) smtp.mailfrom="linux-kernel+bounces-87531-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Return-Path: Received: from sv.mirrors.kernel.org (sv.mirrors.kernel.org. [2604:1380:45e3:2400::1]) by mx.google.com with ESMTPS id u23-20020a170902a61700b001d8a94d10d9si1940972plq.448.2024.02.29.13.13.40 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 29 Feb 2024 13:13:40 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel+bounces-87531-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:45e3:2400::1 as permitted sender) client-ip=2604:1380:45e3:2400::1; Authentication-Results: mx.google.com; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=FpoHLgzV; arc=pass (i=1 spf=pass spfdomain=redhat.com dkim=pass dkdomain=redhat.com dmarc=pass fromdomain=redhat.com); spf=pass (google.com: domain of linux-kernel+bounces-87531-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:45e3:2400::1 as permitted sender) smtp.mailfrom="linux-kernel+bounces-87531-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by sv.mirrors.kernel.org (Postfix) with ESMTPS id 0270B28BE92 for ; Thu, 29 Feb 2024 21:05:36 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 2E47A74C00; Thu, 29 Feb 2024 20:53:53 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b="FpoHLgzV" Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 9791F74BF0 for ; Thu, 29 Feb 2024 20:53:50 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=170.10.129.124 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1709240032; cv=none; b=CvLoOq+N6/U0drxMMRtCWTA8feKEUNACAaxaS9RUCIOQmElJYax1uIC8g10m7SI1cZHHgbfvNa38QE+1JOrH2OdOEs1VbC8C5Eb6qEAxvUKQ34B3kX7idXEcpY4OHQZhL6x6FO8iffvbTasNCXFS3jsNbCII9+EjYtFpoaaEIdc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1709240032; c=relaxed/simple; bh=aSfCidGWZQymlsm3BsMfr0uts4B7cslkQpccMqtTIlU=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=Q2VRq3BG5haJc/W/pwRcxdU6+nsspgJ2WG+B7oGGVEaLIwL7lIT2ViGDQO0SDcghqL5r5wMap60ealQ9zMNQxuXOs9LQxSctnwaT182JENvouC/F7PFdJ5CTR3nJcP3W2C2kiSgAerLvMbdMsjrRfDBnvyiENi/Q6FoUo0PeqCA= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=redhat.com; spf=pass smtp.mailfrom=redhat.com; dkim=pass (1024-bit key) header.d=redhat.com header.i=@redhat.com header.b=FpoHLgzV; arc=none smtp.client-ip=170.10.129.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=redhat.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=redhat.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1709240029; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:autocrypt:autocrypt; bh=pwC7w8RQ315Hy8ZjgqKPWOY3T5YPFeI5JvaDoZSl2GE=; b=FpoHLgzVcto67Kcnqwa0sZKH4arGrKuhzupCc2M1O7hgygpOzRVm1yq+3wdYqrL5o90zLU U4P5Q4CqPgUyQNEvq1az0m19eV4XWGVe9BXfv7xyq34JCMLatt6Okm2jYJKVVC5VyRDGX1 wgvPoJ+piVMtvkgf5e1dZOOWRf/Zvuw= Received: from mail-ed1-f70.google.com (mail-ed1-f70.google.com [209.85.208.70]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-455-iwSYVWW1NemV4y6WCVeAEg-1; Thu, 29 Feb 2024 15:53:47 -0500 X-MC-Unique: iwSYVWW1NemV4y6WCVeAEg-1 Received: by mail-ed1-f70.google.com with SMTP id 4fb4d7f45d1cf-5669be27342so921329a12.0 for ; Thu, 29 Feb 2024 12:53:47 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1709240026; x=1709844826; h=content-transfer-encoding:in-reply-to:autocrypt:from:references:cc :to:content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=pwC7w8RQ315Hy8ZjgqKPWOY3T5YPFeI5JvaDoZSl2GE=; b=CxQJXjWFhh9G3SmIEobM21eCYXuFj9DQOtyQfdT2Qn4QRgACZXyUEB3hzYJT9oivfY 5Dof5VPIoSyvndc/LFmCgGvfeaqUh+MoIS+xYLxKXidy0oqJ/IyfBrSl9nIMYXhsvWkV zN95ssRjP8hog/pAlzQVqhXQ7KFSoXQeorr+Tz5fKRPHZVhX34OhD6TBj4hUxtdyuDpj f+fxurbseMEgAoMp6Qv+4scXCEV6+Rq9Wlli0ykbzMC5XCBwMct1qB1eBqsHl3oeHYd8 yI5dEhRjddTvad8PyZ4rQ+bE1ly4XNTEUKLWjpDuf4OT+iNLXQ0/D1B3LpG4sPRhHoP4 pQZA== X-Forwarded-Encrypted: i=1; AJvYcCXGn/7mE//UQNMs19hob4d5gNtojiei+yToF2JGp67rKUod7TClTiwAg2NVBRZTSgsz+rg2iNOhjZyczo7xZK/kucL5tTUePOWo/laT X-Gm-Message-State: AOJu0YxP6hLaAgm5DgxTeJF1Jx1IOcCqyZTcbiCuJ8PWDwlquIEhozKz eo/hiRZiGezjpe5iNc4xmjy/EjOerES88RgmDYxANh1QG79PlfnnNBILtQ5N6ddSePdeGBeQBMq MNWeW5izrxgN8X8C8wJF815BEy9vGnXCFPdwK+jo1o8m0zXziLQJdbIU3JTOWjA== X-Received: by 2002:a50:85ca:0:b0:565:7733:3c58 with SMTP id q10-20020a5085ca000000b0056577333c58mr58412edh.4.1709240026742; Thu, 29 Feb 2024 12:53:46 -0800 (PST) X-Received: by 2002:a50:85ca:0:b0:565:7733:3c58 with SMTP id q10-20020a5085ca000000b0056577333c58mr58405edh.4.1709240026415; Thu, 29 Feb 2024 12:53:46 -0800 (PST) Received: from ?IPV6:2001:b07:6468:f312:5e2c:eb9a:a8b6:fd3e? ([2001:b07:6468:f312:5e2c:eb9a:a8b6:fd3e]) by smtp.googlemail.com with ESMTPSA id es17-20020a056402381100b005666aaf340dsm925739edb.21.2024.02.29.12.53.45 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 29 Feb 2024 12:53:45 -0800 (PST) Message-ID: Date: Thu, 29 Feb 2024 21:53:43 +0100 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: CVE-2021-46978: KVM: nVMX: Always make an attempt to map eVMCS after migration Content-Language: en-US To: Theodore Ts'o Cc: Greg KH , cve@kernel.org, linux-kernel@vger.kernel.org, KVM list , Vitaly Kuznetsov References: <2024022822-CVE-2021-46978-3516@gregkh> <54595439-1dbf-4c3c-b007-428576506928@redhat.com> <2024022905-barrette-lividly-c312@gregkh> <20240229143454.GC272762@mit.edu> From: Paolo Bonzini Autocrypt: addr=pbonzini@redhat.com; keydata= xsEhBFRCcBIBDqDGsz4K0zZun3jh+U6Z9wNGLKQ0kSFyjN38gMqU1SfP+TUNQepFHb/Gc0E2 CxXPkIBTvYY+ZPkoTh5xF9oS1jqI8iRLzouzF8yXs3QjQIZ2SfuCxSVwlV65jotcjD2FTN04 hVopm9llFijNZpVIOGUTqzM4U55sdsCcZUluWM6x4HSOdw5F5Utxfp1wOjD/v92Lrax0hjiX DResHSt48q+8FrZzY+AUbkUS+Jm34qjswdrgsC5uxeVcLkBgWLmov2kMaMROT0YmFY6A3m1S P/kXmHDXxhe23gKb3dgwxUTpENDBGcfEzrzilWueOeUWiOcWuFOed/C3SyijBx3Av/lbCsHU Vx6pMycNTdzU1BuAroB+Y3mNEuW56Yd44jlInzG2UOwt9XjjdKkJZ1g0P9dwptwLEgTEd3Fo UdhAQyRXGYO8oROiuh+RZ1lXp6AQ4ZjoyH8WLfTLf5g1EKCTc4C1sy1vQSdzIRu3rBIjAvnC tGZADei1IExLqB3uzXKzZ1BZ+Z8hnt2og9hb7H0y8diYfEk2w3R7wEr+Ehk5NQsT2MPI2QBd wEv1/Aj1DgUHZAHzG1QN9S8wNWQ6K9DqHZTBnI1hUlkp22zCSHK/6FwUCuYp1zcAEQEAAc0j UGFvbG8gQm9uemluaSA8cGJvbnppbmlAcmVkaGF0LmNvbT7CwU0EEwECACMFAlRCcBICGwMH CwkIBwMCAQYVCAIJCgsEFgIDAQIeAQIXgAAKCRB+FRAMzTZpsbceDp9IIN6BIA0Ol7MoB15E 11kRz/ewzryFY54tQlMnd4xxfH8MTQ/mm9I482YoSwPMdcWFAKnUX6Yo30tbLiNB8hzaHeRj jx12K+ptqYbg+cevgOtbLAlL9kNgLLcsGqC2829jBCUTVeMSZDrzS97ole/YEez2qFpPnTV0 VrRWClWVfYh+JfzpXmgyhbkuwUxNFk421s4Ajp3d8nPPFUGgBG5HOxzkAm7xb1cjAuJ+oi/K CHfkuN+fLZl/u3E/fw7vvOESApLU5o0icVXeakfSz0LsygEnekDbxPnE5af/9FEkXJD5EoYG SEahaEtgNrR4qsyxyAGYgZlS70vkSSYJ+iT2rrwEiDlo31MzRo6Ba2FfHBSJ7lcYdPT7bbk9 AO3hlNMhNdUhoQv7M5HsnqZ6unvSHOKmReNaS9egAGdRN0/GPDWr9wroyJ65ZNQsHl9nXBqE AukZNr5oJO5vxrYiAuuTSd6UI/xFkjtkzltG3mw5ao2bBpk/V/YuePrJsnPFHG7NhizrxttB nTuOSCMo45pfHQ+XYd5K1+Cv/NzZFNWscm5htJ0HznY+oOsZvHTyGz3v91pn51dkRYN0otqr bQ4tlFFuVjArBZcapSIe6NV8C4cEiSTOwE0EVEJx7gEIAMeHcVzuv2bp9HlWDp6+RkZe+vtl KwAHplb/WH59j2wyG8V6i33+6MlSSJMOFnYUCCL77bucx9uImI5nX24PIlqT+zasVEEVGSRF m8dgkcJDB7Tps0IkNrUi4yof3B3shR+vMY3i3Ip0e41zKx0CvlAhMOo6otaHmcxr35sWq1Jk tLkbn3wG+fPQCVudJJECvVQ//UAthSSEklA50QtD2sBkmQ14ZryEyTHQ+E42K3j2IUmOLriF dNr9NvE1QGmGyIcbw2NIVEBOK/GWxkS5+dmxM2iD4Jdaf2nSn3jlHjEXoPwpMs0KZsgdU0pP JQzMUMwmB1wM8JxovFlPYrhNT9MAEQEAAcLBMwQYAQIACQUCVEJx7gIbDAAKCRB+FRAMzTZp sadRDqCctLmYICZu4GSnie4lKXl+HqlLanpVMOoFNnWs9oRP47MbE2wv8OaYh5pNR9VVgyhD OG0AU7oidG36OeUlrFDTfnPYYSF/mPCxHttosyt8O5kabxnIPv2URuAxDByz+iVbL+RjKaGM GDph56ZTswlx75nZVtIukqzLAQ5fa8OALSGum0cFi4ptZUOhDNz1onz61klD6z3MODi0sBZN Aj6guB2L/+2ZwElZEeRBERRd/uommlYuToAXfNRdUwrwl9gRMiA0WSyTb190zneRRDfpSK5d usXnM/O+kr3Dm+Ui+UioPf6wgbn3T0o6I5BhVhs4h4hWmIW7iNhPjX1iybXfmb1gAFfjtHfL xRUr64svXpyfJMScIQtBAm0ihWPltXkyITA92ngCmPdHa6M1hMh4RDX+Jf1fiWubzp1voAg0 JBrdmNZSQDz0iKmSrx8xkoXYfA3bgtFN8WJH2xgFL28XnqY4M6dLhJwV3z08tPSRqYFm4NMP dRsn0/7oymhneL8RthIvjDDQ5ktUjMe8LtHr70OZE/TT88qvEdhiIVUogHdo4qBrk41+gGQh b906Dudw5YhTJFU3nC6bbF2nrLlB4C/XSiH76ZvqzV0Z/cAMBo5NF/w= In-Reply-To: <20240229143454.GC272762@mit.edu> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 2/29/24 15:34, Theodore Ts'o wrote: > On Thu, Feb 29, 2024 at 11:04:45AM +0100, Paolo Bonzini wrote: >> Also, LKML does not get the initial announcement, which makes it a bit >> more painful to find the full discussion on lore (you have to go >> through a "no message with that id, maybe you mean this one from other >> mailing lists" page, instead of having the whole thread in the same >> place). A linux-cve mailing list with public posting, used for Cc and >> Reply-to of the initial message, would solve this issue as well. > > I believe the url https://lore.kernel.org/all/ will get > the whole thread, regardless of which mailing lists individual mail > messages were sent to, does it not? Yes, it does. That covers the web interface but it still leaves out subscribers and people reading via NNTP. That said, I'm not sure why people who look at CVEs for a living should not have their own lighter-traffic mailing list, which was the main reason to have a linux-cve mailing list. Paolo