[0/2] KVM: SVM: Fix an STI shadow on VMRUN bug

Message

Sean Christopherson Feb. 15, 2025, 1:09 a.m. UTC

Fix an amusing bug where KVM puts VMRUN in an STI shadow, which AMD CPUs
bleed into guest state if a #VMEXIT occurs before completing the VMRUN,
e.g. if vectoring an injected exception triggers an exit.

Sean Christopherson (2):
  KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI
    shadow
  KVM: selftests: Assert that STI blocking isn't set after event
    injection

 arch/x86/kvm/svm/svm.c                             | 14 ++++++++++++++
 arch/x86/kvm/svm/vmenter.S                         | 10 +---------
 .../selftests/kvm/x86/nested_exceptions_test.c     |  2 ++
 3 files changed, 17 insertions(+), 9 deletions(-)


base-commit: f0f0cbf3b767935abcfdb36649ab626fb2ab5ae7