From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail05.groups.io (mail05.groups.io [45.79.224.7]) by spool.mail.gandi.net (Postfix) with ESMTPS id B7E4F740035 for ; Wed, 24 Apr 2024 16:27:23 +0000 (UTC) DKIM-Signature: a=rsa-sha256; bh=VZ9nUXkhJHclCSC1UHNR4Sr0ZjnARtKPRAhmD3GQZrc=; c=relaxed/simple; d=groups.io; h=MIME-Version:References:In-Reply-To:From:Date:Message-ID:Subject:To:Cc:Precedence:List-Subscribe:List-Help:Sender:List-Id:Mailing-List:Delivered-To:Resent-Date:Resent-From:Reply-To:List-Unsubscribe-Post:List-Unsubscribe:Content-Type; s=20240206; t=1713976042; v=1; b=4ZxYNURVc3tSr5CiUWL+XapJAZN03hu7NdZxVnA46GBV998152sQzdSGLQskyzxDmgr4Oo00 K6xpdDDBRc2/cBoXz8ETP/rZ0HWk/BEIj6IpIZBRSDUD3YkMrWCmLUJmh+OTJACBAvDj70vSSdB iBpYeJ9l4bqNDrEY9AqwGLEX/I7YfkI0dKY+V0XSgr04SENsn27UapBD4QiG1iWAwcFyOhj6+7L S/m3qSp6+XNqoiZhkMHnN/8EhjIBryilovIgwTQlGEIxdt3WZ8eBjWyjSwFIl7LEkS1fei1aBin 67qnJtdI+YMC9GzCQx+GlhXjbhJeZO10UyO4ssgEXfoKA== X-Received: by 127.0.0.2 with SMTP id RMSoYY7687511xwmdd3ezH4I; Wed, 24 Apr 2024 09:27:22 -0700 X-Received: from sin.source.kernel.org (sin.source.kernel.org [145.40.73.55]) by mx.groups.io with SMTP id smtpd.web10.1107.1713976041109550472 for ; Wed, 24 Apr 2024 09:27:21 -0700 X-Received: from smtp.kernel.org (transwarp.subspace.kernel.org [100.75.92.58]) by sin.source.kernel.org (Postfix) with ESMTP id 1BC4DCE177D for ; Wed, 24 Apr 2024 16:27:19 +0000 (UTC) X-Received: by smtp.kernel.org (Postfix) with ESMTPSA id C693AC4AF07 for ; Wed, 24 Apr 2024 16:27:17 +0000 (UTC) X-Received: by mail-lf1-f48.google.com with SMTP id 2adb3069b0e04-5193363d255so9405487e87.3 for ; Wed, 24 Apr 2024 09:27:17 -0700 (PDT) X-Gm-Message-State: NaCUBsaew4E1oOlwmea88BpAx7686176AA= X-Google-Smtp-Source: AGHT+IGpsnr5UHF7rc+Xuk5ww5u8jPWBJWRq17zD6HKAP+24ZtTmQJWufoFToI6Bh22i3tdTt05GCEheMfKQ3qPCYf4= X-Received: by 2002:ac2:55a3:0:b0:51c:338:c3f1 with SMTP id y3-20020ac255a3000000b0051c0338c3f1mr1196540lfg.28.1713976036025; Wed, 24 Apr 2024 09:27:16 -0700 (PDT) MIME-Version: 1.0 References: <20240419182146.699506-1-acdunlap@google.com> In-Reply-To: From: "Ard Biesheuvel" Date: Wed, 24 Apr 2024 18:27:05 +0200 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: [edk2-devel] [PATCH v2] OvmfPkg: Harden #VC instruction emulation somewhat (CVE-2024-25742) To: devel@edk2.groups.io, kraxel@redhat.com Cc: Adam Dunlap , Borislav Petkov , Peter Gonda , Ard Biesheuvel , Erdem Aktas , Jiewen Yao , Michael Roth , Min Xu , Tom Lendacky , Yuan Yu Precedence: Bulk List-Subscribe: List-Help: Sender: devel@edk2.groups.io List-Id: Mailing-List: list devel@edk2.groups.io; contact devel+owner@edk2.groups.io Resent-Date: Wed, 24 Apr 2024 09:27:21 -0700 Resent-From: ardb@kernel.org Reply-To: devel@edk2.groups.io,ardb@kernel.org List-Unsubscribe-Post: List-Unsubscribe=One-Click List-Unsubscribe: Content-Type: text/plain; charset="UTF-8" X-GND-Status: LEGIT Authentication-Results: spool.mail.gandi.net; dkim=pass header.d=groups.io header.s=20240206 header.b=4ZxYNURV; dmarc=fail reason="SPF not aligned (relaxed), DKIM not aligned (relaxed)" header.from=kernel.org (policy=none); spf=pass (spool.mail.gandi.net: domain of bounce@groups.io designates 45.79.224.7 as permitted sender) smtp.mailfrom=bounce@groups.io On Tue, 23 Apr 2024 at 11:28, Gerd Hoffmann wrote: > > On Fri, Apr 19, 2024 at 11:21:46AM -0700, Adam Dunlap wrote: > > Ensure that when a #VC exception happens, the instruction at the > > instruction pointer matches the instruction that is expected given the > > error code. This is to mitigate the ahoi WeSee attack [1] that could > > allow hypervisors to breach integrity and confidentiality of the > > firmware by maliciously injecting interrupts. This change is a > > translated version of a linux patch e3ef461af35a ("x86/sev: Harden #VC > > instruction emulation somewhat") > > > > [1] https://ahoi-attacks.github.io/wesee/ > > > > Cc: Borislav Petkov (AMD) > > Cc: Tom Lendacky > > Signed-off-by: Adam Dunlap > > Reviewed-by: Gerd Hoffmann > Thanks all, I've merged this now. -=-=-=-=-=-=-=-=-=-=-=- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#118221): https://edk2.groups.io/g/devel/message/118221 Mute This Topic: https://groups.io/mt/105623545/7686176 Mute #vc:https://edk2.groups.io/g/devel/mutehashtag/vc Group Owner: devel+owner@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [rebecca@openfw.io] -=-=-=-=-=-=-=-=-=-=-=-