Carlos López bee400ad4f virt: sev-guest: Explicitly leak pages in unknown state ...

commit fd948c3f96 upstream.

When set_memory_{encrypted,decrypted}() fail, the user cannot know at which
point the function failed, meaning that the pages are left in an unknown state
from the point of view of the caller.

Since the pages may be left in an unencrypted state, they are not suitable for
general use, and cannot be returned safely to the buddy allocator. Avoid the
issue by never freeing the pages, and then do the proper accounting by calling
snp_leak_pages().

Fixes: 3e385c0d6c ("virt: sev-guest: Move SNP Guest Request data pages handling under snp_cmd_mutex")
Signed-off-by: Carlos López <clopez@suse.de>
Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Cc: stable@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-06-01 17:50:46 +02:00

..

acrn

drivers: virt: acrn: Don't use %pK through printk

2025-07-24 11:42:01 +02:00

coco

virt: sev-guest: Explicitly leak pages in unknown state

2026-06-01 17:50:46 +02:00

nitro_enclaves

…

vboxguest

treewide, timers: Rename from_timer() to timer_container_of()

2025-06-08 09:07:37 +02:00

fsl_hypervisor.c

…

Kconfig

…

Makefile

…

vmgenid.c

…