]> git.baikalelectronics.ru Git - kernel.git/commit
x86/boot/compressed/64: Check SEV encryption in the 32-bit boot-path
authorJoerg Roedel <jroedel@suse.de>
Fri, 12 Mar 2021 12:38:23 +0000 (13:38 +0100)
committerBorislav Petkov <bp@suse.de>
Thu, 18 Mar 2021 22:04:12 +0000 (23:04 +0100)
commit00e1d3c1a6fd282deb711da8594ddc219f7f0c23
treee11ccee8505fbd3f618a0d215561e9e393edc790
parent821773d760b090152026cc8b52eb6414500e43d5
x86/boot/compressed/64: Check SEV encryption in the 32-bit boot-path

Check whether the hypervisor reported the correct C-bit when running
as an SEV guest. Using a wrong C-bit position could be used to leak
sensitive data from the guest to the hypervisor.

Signed-off-by: Joerg Roedel <jroedel@suse.de>
Signed-off-by: Borislav Petkov <bp@suse.de>
Link: https://lkml.kernel.org/r/20210312123824.306-8-joro@8bytes.org
arch/x86/boot/compressed/head_64.S