Reference: https://bugzilla.kernel.org/show_bug.cgi?id=54521 The vmxon region is unused by nvmx, but adding these checks are probably harmless and may detect buggy L1 hypervisors in the future! v2: 1/4 - Commit message change to reflect addition of new function 2/4 - Use cpuid_maxphyaddr() - Fix a leak with kunmap() - Remove unnecessary braces around comparisions - Move all checks into a common function, this will be later used by handle_vmptrld and handle_vmclear in 4/4 4/4 - New patch - use common function to perform checks on vmptr Bandan Das (4): KVM: nVMX: rearrange get_vmx_mem_address KVM: nVMX: additional checks on vmxon region KVM: nVMX: fail on invalid vmclear/vmptrld pointer KVM: nVMX: move vmclear and vmptrld pre-checks to nested_vmx_check_vmptr arch/x86/kvm/cpuid.c | 1 + arch/x86/kvm/vmx.c | 240 +++++++++++++++++++++++++++++++++------------------ 2 files changed, 156 insertions(+), 85 deletions(-) -- 1.8.3.1 -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html