git.samba.org / sfrench / cifs-2.6.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e927e62) | patch
x86/boot/compressed/64: Check SEV encryption in the 32-bit boot-path
authorJoerg Roedel <jroedel@suse.de>
Fri, 12 Mar 2021 12:38:23 +0000 (13:38 +0100)
committerBorislav Petkov <bp@suse.de>
Thu, 18 Mar 2021 22:04:12 +0000 (23:04 +0100)
commitfef81c86262879d4b1176ef51a834c15b805ebb9
treee11ccee8505fbd3f618a0d215561e9e393edc790tree
parente927e62d8e370ebfc0d702fec22bc752249ebcefcommit | diff
x86/boot/compressed/64: Check SEV encryption in the 32-bit boot-path

Check whether the hypervisor reported the correct C-bit when running
as an SEV guest. Using a wrong C-bit position could be used to leak
sensitive data from the guest to the hypervisor.

Signed-off-by: Joerg Roedel <jroedel@suse.de>
Signed-off-by: Borislav Petkov <bp@suse.de>
Link: https://lkml.kernel.org/r/20210312123824.306-8-joro@8bytes.org
arch/x86/boot/compressed/head_64.S diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.