Re: [PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-15 Thread Wanpeng Li
2016-08-09 2:16 GMT+08:00 Radim Krčmář : > If vmcs12 does not intercept APIC_BASE writes, then KVM will handle the > write with vmcs02 as the current VMCS. > This will incorrectly apply modifications intended for vmcs01 to vmcs02 > and L2 can use it to gain access to L0's x2APIC registers by disabl

Re: [PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-15 Thread Radim Krčmář
2016-08-15 13:19+0800, Wanpeng Li: > 2016-08-12 19:39 GMT+08:00 Radim Krčmář : >> 2016-08-12 18:14+0800, Wanpeng Li: >>> 2016-08-12 17:44 GMT+08:00 Radim Krčmář : 2016-08-12 14:07+0800, Wanpeng Li: > 2016-08-09 2:16 GMT+08:00 Radim Krčmář : >> If vmcs12 does not intercept APIC_BASE wri

Re: [PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-14 Thread Wanpeng Li
2016-08-12 19:39 GMT+08:00 Radim Krčmář : > 2016-08-12 18:14+0800, Wanpeng Li: >> 2016-08-12 17:44 GMT+08:00 Radim Krčmář : >>> 2016-08-12 14:07+0800, Wanpeng Li: 2016-08-09 2:16 GMT+08:00 Radim Krčmář : > If vmcs12 does not intercept APIC_BASE writes, then KVM will handle the > write

Re: [PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-12 Thread Radim Krčmář
2016-08-12 18:14+0800, Wanpeng Li: > 2016-08-12 17:44 GMT+08:00 Radim Krčmář : >> 2016-08-12 14:07+0800, Wanpeng Li: >>> 2016-08-09 2:16 GMT+08:00 Radim Krčmář : If vmcs12 does not intercept APIC_BASE writes, then KVM will handle the write with vmcs02 as the current VMCS. This will i

Re: [PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-12 Thread Wanpeng Li
2016-08-12 17:44 GMT+08:00 Radim Krčmář : > 2016-08-12 14:07+0800, Wanpeng Li: >> 2016-08-09 2:16 GMT+08:00 Radim Krčmář : >>> If vmcs12 does not intercept APIC_BASE writes, then KVM will handle the >>> write with vmcs02 as the current VMCS. >>> This will incorrectly apply modifications intended fo

Re: [PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-12 Thread Radim Krčmář
2016-08-12 14:07+0800, Wanpeng Li: > 2016-08-09 2:16 GMT+08:00 Radim Krčmář : >> If vmcs12 does not intercept APIC_BASE writes, then KVM will handle the >> write with vmcs02 as the current VMCS. >> This will incorrectly apply modifications intended for vmcs01 to vmcs02 >> and L2 can use it to gain

Re: [PATCH 2/2] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write

2016-08-11 Thread Wanpeng Li
2016-08-09 2:16 GMT+08:00 Radim Krčmář : > If vmcs12 does not intercept APIC_BASE writes, then KVM will handle the > write with vmcs02 as the current VMCS. > This will incorrectly apply modifications intended for vmcs01 to vmcs02 > and L2 can use it to gain access to L0's x2APIC registers by disabl