[PATCH v4 4/5] x86/head/64: Check SEV encryption before switching to kernel page-table

2020-10-28 Thread Joerg Roedel
From: Joerg Roedel When SEV is enabled the kernel requests the C-Bit position again from the hypervisor to built its own page-table. Since the hypervisor is an untrusted source the C-bit position needs to be verified before the kernel page-table is used. Call the sev_verify_cbit() function

Re: [PATCH v4 4/5] x86/head/64: Check SEV encryption before switching to kernel page-table

2020-10-28 Thread Tom Lendacky
On 10/28/20 11:46 AM, Joerg Roedel wrote: > From: Joerg Roedel > > When SEV is enabled the kernel requests the C-Bit position again from > the hypervisor to built its own page-table. Since the hypervisor is an s/built/build/ > untrusted source the C-bit position needs to be verified before the