KVM: VMX: Include MKTME KeyID bits in shadow_zero_check
authorKai Huang <kai.huang@intel.com>
Tue, 19 Apr 2022 11:17:04 +0000 (23:17 +1200)
committerPaolo Bonzini <pbonzini@redhat.com>
Thu, 12 May 2022 13:51:45 +0000 (09:51 -0400)
commit3c5c32457d7da76d077effc08176d3ad2e7536f9
tree5aaa157ba8c05e67613d9653e274698988f9c94a
parente54f1ff244ac96c919049838a5a1f03087793594
KVM: VMX: Include MKTME KeyID bits in shadow_zero_check

Intel MKTME KeyID bits (including Intel TDX private KeyID bits) should
never be set to SPTE.  Set shadow_me_value to 0 and shadow_me_mask to
include all MKTME KeyID bits to include them to shadow_zero_check.

Signed-off-by: Kai Huang <kai.huang@intel.com>
Message-Id: <27bc10e97a3c0b58a4105ff9107448c190328239.1650363789.git.kai.huang@intel.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
arch/x86/kvm/mmu.h
arch/x86/kvm/mmu/spte.c
arch/x86/kvm/vmx/vmx.c