Re: [PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-15 Thread Wanpeng Li
2016-08-09 2:16 GMT+08:00 Radim Krčmář : > If vmcs12 does not intercept APIC_BASE writes, then KVM will handle the > write with vmcs02 as the current VMCS. > This will incorrectly apply modifications intended for vmcs01 to vmcs02 > and L2 can use it to gain access to L0's x2APIC registers by disabl

Re: [PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-15 Thread Radim Krčmář
2016-08-15 13:19+0800, Wanpeng Li: > 2016-08-12 19:39 GMT+08:00 Radim Krčmář : >> 2016-08-12 18:14+0800, Wanpeng Li: >>> 2016-08-12 17:44 GMT+08:00 Radim Krčmář : 2016-08-12 14:07+0800, Wanpeng Li: > 2016-08-09 2:16 GMT+08:00 Radim Krčmář : >> If vmcs12 does not intercept APIC_BASE wri

Re: [PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-14 Thread Wanpeng Li
2016-08-12 19:39 GMT+08:00 Radim Krčmář : > 2016-08-12 18:14+0800, Wanpeng Li: >> 2016-08-12 17:44 GMT+08:00 Radim Krčmář : >>> 2016-08-12 14:07+0800, Wanpeng Li: 2016-08-09 2:16 GMT+08:00 Radim Krčmář : > If vmcs12 does not intercept APIC_BASE writes, then KVM will handle the > write

Re: [PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-12 Thread Radim Krčmář
2016-08-12 18:14+0800, Wanpeng Li: > 2016-08-12 17:44 GMT+08:00 Radim Krčmář : >> 2016-08-12 14:07+0800, Wanpeng Li: >>> 2016-08-09 2:16 GMT+08:00 Radim Krčmář : If vmcs12 does not intercept APIC_BASE writes, then KVM will handle the write with vmcs02 as the current VMCS. This will i

Re: [PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-12 Thread Wanpeng Li
2016-08-12 17:44 GMT+08:00 Radim Krčmář : > 2016-08-12 14:07+0800, Wanpeng Li: >> 2016-08-09 2:16 GMT+08:00 Radim Krčmář : >>> If vmcs12 does not intercept APIC_BASE writes, then KVM will handle the >>> write with vmcs02 as the current VMCS. >>> This will incorrectly apply modifications intended fo

Re: [PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-12 Thread Radim Krčmář
2016-08-12 14:07+0800, Wanpeng Li: > 2016-08-09 2:16 GMT+08:00 Radim Krčmář : >> If vmcs12 does not intercept APIC_BASE writes, then KVM will handle the >> write with vmcs02 as the current VMCS. >> This will incorrectly apply modifications intended for vmcs01 to vmcs02 >> and L2 can use it to gain

Re: [PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-11 Thread Wanpeng Li
2016-08-09 2:16 GMT+08:00 Radim Krčmář : > If vmcs12 does not intercept APIC_BASE writes, then KVM will handle the > write with vmcs02 as the current VMCS. > This will incorrectly apply modifications intended for vmcs01 to vmcs02 > and L2 can use it to gain access to L0's x2APIC registers by disabl

[PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-08 Thread Radim Krčmář
If vmcs12 does not intercept APIC_BASE writes, then KVM will handle the write with vmcs02 as the current VMCS. This will incorrectly apply modifications intended for vmcs01 to vmcs02 and L2 can use it to gain access to L0's x2APIC registers by disabling virtualized x2APIC while using msr bitmap tha