kvm: nVMX: Enforce cpl=0 for VMX instructions
authorFelix Wilhelm <fwilhelm@google.com>
Mon, 11 Jun 2018 07:43:44 +0000 (09:43 +0200)
committerPaolo Bonzini <pbonzini@redhat.com>
Tue, 12 Jun 2018 13:06:06 +0000 (15:06 +0200)
commit727ba748e110b4de50d142edca9d6a9b7e6111d8
treeb7573effd1110a11aac720cc38407bfdb45f651f
parentf4160e459c57646122beaea3f163b798179ea446
kvm: nVMX: Enforce cpl=0 for VMX instructions

VMX instructions executed inside a L1 VM will always trigger a VM exit
even when executed with cpl 3. This means we must perform the
privilege check in software.

Fixes: 70f3aac964ae("kvm: nVMX: Remove superfluous VMX instruction fault checks")
Cc: stable@vger.kernel.org
Signed-off-by: Felix Wilhelm <fwilhelm@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
arch/x86/kvm/vmx.c