]> git.karo-electronics.de Git - linux-beck.git/commit
projects / linux-beck.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fc1a812) | patch
KVM: x86: zero IDT limit on entry to SMM
authorPaolo Bonzini <pbonzini@redhat.com>
Fri, 7 Aug 2015 10:27:54 +0000 (12:27 +0200)
committerPaolo Bonzini <pbonzini@redhat.com>
Fri, 7 Aug 2015 10:46:32 +0000 (12:46 +0200)
commit18c3626e3d5dfa8b90e2dc6dbc30064c0e1c97ad
tree023ac1fe38a06a4a4f5845cf87bbe4bc98b4e3actree | snapshot
parentfc1a8126bf8095b10f5a79893f2d2b19227f88f2commit | diff
KVM: x86: zero IDT limit on entry to SMM

The recent BlackHat 2015 presentation "The Memory Sinkhole"
mentions that the IDT limit is zeroed on entry to SMM.

This is not documented, and must have changed some time after 2010
(see http://www.ssi.gouv.fr/uploads/IMG/pdf/IT_Defense_2010_final.pdf).
KVM was not doing it, but the fix is easy.

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
arch/x86/kvm/x86.c diff | blob | history
Beck SC1x5 Kernel