• Linus Torvalds's avatar
    Merge tag 'x86_tdx_for_6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip · d8e47318
    Linus Torvalds authored
    Pull Intel Trust Domain Extensions (TDX) updates from Dave Hansen:
     "Other than a minor fixup, the content here is to ensure that TDX
      guests never see virtualization exceptions (#VE's) that might be
      induced by the untrusted VMM.
    
      This is a highly desirable property. Without it, #VE exception
      handling would fall somewhere between NMIs, machine checks and total
      insanity. With it, #VE handling remains pretty mundane.
    
      Summary:
    
       - Fixup comment typo
    
       - Prevent unexpected #VE's from:
          - Hosts removing perfectly good guest mappings (SEPT_VE_DISABLE)
          - Excessive #VE notifications (NOTIFY_ENABLES) which are delivered
            via a #VE"
    
    * tag 'x86_tdx_for_6.3' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
      x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall()
      x86/tdx: Disable NOTIFY_ENABLES
      x86/tdx: Relax SEPT_VE_DISABLE check for debug TD
      x86/tdx: Use ReportFatalError to report missing SEPT_VE_DISABLE
      x86/tdx: Expand __tdx_hypercall() to handle more arguments
      x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments
      x86/tdx: Add more registers to struct tdx_hypercall_args
      x86/tdx: Fix typo in comment in __tdx_hypercall()
    d8e47318
tdx.c 22.4 KB