kvm: nVMX: Restrict VMX capability MSR changes
authorJim Mattson <jmattson@google.com>
Tue, 29 May 2018 16:11:32 +0000 (09:11 -0700)
committerPaolo Bonzini <pbonzini@redhat.com>
Mon, 4 Jun 2018 15:52:51 +0000 (17:52 +0200)
commita943ac50d10aac96dca63d0460365a699d41fdd0
tree7c95e61065077dd80b39e5f09a1e117a8a9e37c9
parentc5ce8235cffa00c207e24210329094d7634bb467
kvm: nVMX: Restrict VMX capability MSR changes

Disallow changes to the VMX capability MSRs while the vCPU is in VMX
operation. Although this does break the existing API, it helps to
avoid some potentially tricky situations for which there is no
architected behavior.

Signed-off-by: Jim Mattson <jmattson@google.com>
Reviewed-by: Krish Sadhukhan <krish.sadhukhan@oracle.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
arch/x86/kvm/vmx.c