On Wed, May 12, 2010 at 11:48:18AM +0300, Avi Kivity wrote: > When cr0.wp=0, we may shadow a gpte having u/s=1 and r/w=0 with an spte > having u/s=0 and r/w=1. This allows excessive access if the guest sets > cr0.wp=1 and accesses through this spte. > > Fix by making cr0.wp part of the base role; we'll have different sptes for > the two cases and the problem disappears. > > Signed-off-by: Avi Kivity <avi@xxxxxxxxxx> > --- > Documentation/kvm/mmu.txt | 2 ++ > arch/x86/include/asm/kvm_host.h | 1 + > arch/x86/kvm/mmu.c | 3 ++- > 3 files changed, 5 insertions(+), 1 deletions(-) Applied, thanks. -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html