Zongmin ZhouandAnup Patel 8d9c9b135b KVM: riscv: Fix Spectre-v1 in vector register access ...

User-controlled register indices from the ONE_REG ioctl are used to
index into the vector register buffer (v0..v31). Sanitize the calculated
offset with array_index_nospec() to prevent speculative out-of-bounds
access.

Signed-off-by: Zongmin Zhou <zhouzongmin@kylinos.cn>
Reviewed-by: Anup Patel <anup@brainfault.org>
Link: https://lore.kernel.org/r/20260715030818.75657-1-min_halo@163.com
Signed-off-by: Anup Patel <anup@brainfault.org>

2026-07-15 18:06:16 +05:30

..

aia_aplic.c

RISC-V: KVM: Use flexible array for APLIC IRQ state

2026-06-01 13:55:04 +05:30

aia_device.c

RISC-V: KVM: AIA: Make HGEI number management fully per-CPU

2026-05-26 09:05:10 +05:30

aia_imsic.c

RISC-V: KVM: Fix NULL pointer dereference in AIA IMSIC functions

2026-06-04 11:18:12 +05:30

aia.c

RISC-V: KVM: Serialize virtual interrupt pending state updates

2026-07-15 13:37:48 +05:30

gstage.c

riscv: kvm: Skip TLB flush when G-stage PTE becomes valid with Svvptc

2026-07-13 18:17:01 +05:30

isa.c

RISC-V: KVM: Factor-out ISA checks into separate sources

2026-04-03 17:35:01 +05:30

Kconfig

KVM: remove CONFIG_KVM_GENERIC_MMU_NOTIFIER

2026-02-28 15:31:35 +01:00

main.c

RISC-V: KVM: AIA: Make HGEI number management fully per-CPU

2026-05-26 09:05:10 +05:30

Makefile

RISC-V: KVM: Factor-out VCPU config into separate sources

2026-04-03 17:48:40 +05:30

mmu.c

RISC-V: KVM: Avoid redundant page-table allocations in ioremap topup

2026-07-13 13:22:45 +05:30

nacl.c

riscv: kvm: Use endian-specific __lelong for NACL shared memory

2026-06-14 11:09:41 +05:30

tlb.c

Merge tag 'riscv-for-linus-7.1-mw1' of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux

2026-04-24 10:00:37 -07:00

trace.h

…

vcpu_config.c

RISC-V: KVM: Factor-out VCPU config into separate sources

2026-04-03 17:48:40 +05:30

vcpu_exit.c

RISC-V: KVM: Inject instruction access fault on unmapped guest fetch

2026-07-14 18:31:51 +05:30

vcpu_fp.c

RISC-V: KVM: Factor-out ISA checks into separate sources

2026-04-03 17:35:01 +05:30

vcpu_insn.c

RISC-V: KVM: Fix sign extension for MMIO loads

2026-05-18 10:19:18 +05:30

vcpu_onereg.c

RISC-V: KVM: Serialize virtual interrupt pending state updates

2026-07-15 13:37:48 +05:30

vcpu_pmu.c

KVM: riscv: PMU: Bound counter mask scan to BITS_PER_LONG

2026-07-13 18:16:56 +05:30

vcpu_sbi_base.c

…

vcpu_sbi_forward.c

RISC-V: KVM: Add SBI MPXY extension support for Guest

2025-11-24 09:55:36 +05:30

vcpu_sbi_fwft.c

KVM: riscv: SBI FWFT: Apply LOCK flag only on successful set

2026-07-13 13:38:27 +05:30

vcpu_sbi_hsm.c

…

vcpu_sbi_pmu.c

…

vcpu_sbi_replace.c

…

vcpu_sbi_sta.c

RISC-V: KVM: Fix invalid HVA warning in steal-time recording

2026-05-18 10:19:18 +05:30

vcpu_sbi_system.c

RISC-V: KVM: Document a TOCTOU race in SBI system suspend handler

2026-06-04 11:12:40 +05:30

vcpu_sbi_v01.c

RISC-V: KVM: Fix NULL pointer dereference in SBI v0.1 SEND_IPI handler

2026-05-18 10:19:18 +05:30

vcpu_sbi.c

RISC-V: KVM: Add SBI MPXY extension support for Guest

2025-11-24 09:55:36 +05:30

vcpu_switch.S

…

vcpu_timer.c

RISC-V: KVM: Fix timer state restore

2026-06-04 12:18:43 +05:30

vcpu_vector.c

KVM: riscv: Fix Spectre-v1 in vector register access

2026-07-15 18:06:16 +05:30

vcpu.c

RISC-V: KVM: Serialize virtual interrupt pending state updates

2026-07-15 13:37:48 +05:30

vm.c

RISC-V: KVM: Reuse KVM_CAP_VM_GPA_BITS to select HGATP.MODE

2026-04-04 13:48:21 +05:30

vmid.c

RISC-V: KVM: Support runtime configuration for per-VM's HGATP mode

2026-04-04 13:21:21 +05:30