Re: [PATCH] x86/tdx: Allow extended topology CPUID leafs to be emulated by hypercall

From: Dave Hansen
Date: Fri Sep 08 2023 - 14:00:16 EST


On 9/8/23 10:56, Sagi Shahar wrote:
> The current TDX module does not handle extended topology leaves
> explicitly and will generate a #VE but the current #VE handler
> implementation blindly returns 0 for those CPUID leaves.
>
> This currently causes TDX guests to see 0 values when querying the numa
> topology leading to incorrect numa configurations.
>
> This patch fixes this behavior by emulating the extended topology leaves
> using the CPUID hypercall.

... and thus acquires the data from the untrusted VMM. Right?

What are the security implications of consuming this untrusted data?