[PATCH v2 0/2] KVM: SVM: Fix an STI shadow on VMRUN bug

From: Sean Christopherson
Date: Mon Feb 24 2025 - 11:55:03 EST


Fix a bug where KVM puts VMRUN in an STI shadow, which AMD CPUs bleed
into guest state if a #VMEXIT occurs before completing the VMRUN, e.g.
if vectoring an injected exception triggers an exit.

v2: Use "raw" variants to avoid tracing in noinstr code. [kernel test robot]

v1: https://lore.kernel.org/all/20250215010946.1201353-1-seanjc@xxxxxxxxxx

Sean Christopherson (2):
KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI
shadow
KVM: selftests: Assert that STI blocking isn't set after event
injection

arch/x86/kvm/svm/svm.c | 14 ++++++++++++++
arch/x86/kvm/svm/vmenter.S | 10 +---------
.../selftests/kvm/x86/nested_exceptions_test.c | 2 ++
3 files changed, 17 insertions(+), 9 deletions(-)


base-commit: fed48e2967f402f561d80075a20c5c9e16866e53
--
2.48.1.601.g30ceb7b040-goog