mbox series

[SRU,n:linux-azure,0/1] Kernel fails to enable XSAVE when running in a “v5” AMD SEV-SNP VM

Message ID 20240612202739.25050-1-john.cabaj@canonical.com
Headers show
Series Kernel fails to enable XSAVE when running in a “v5” AMD SEV-SNP VM | expand

Message

John Cabaj June 12, 2024, 8:27 p.m. UTC
BugLink: https://bugs.launchpad.net/bugs/2069204

SRU Justification

[Impact]

* Request from MSFT to include patch to disable CET Shadow Stack on SEV-SNP. Due to CPUID emulation bug not being fixed in VMs until October 2024, this feature is being disabled in the interim.

[Fix]

* Clean cherry-pick SAUCE patch from MSFT tree, https://github.com/dcui/linux
* cdf5cdd: "x86/hyperv: temporarily disable CET SS on SEV-SNP due to a paravisor bug"

[Test Plan]

* Compile tested
* Boot tested
* Microsoft tested

[Regression potential]

* Changes isolated, minimal regression risk

[Other info]

* SF #00387447

Dexuan Cui (1):
  UBUNTU: SAUCE: x86/hyperv: temporarily disable CET SS on SEV-SNP due
    to a paravisor bug

 arch/x86/kernel/cpu/mshyperv.c | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

Comments

Philip Cox June 13, 2024, 1:30 p.m. UTC | #1
On Wed, 2024-06-12 at 15:27 -0500, John Cabaj wrote:
> BugLink: https://bugs.launchpad.net/bugs/2069204
> 
> SRU Justification
> 
> [Impact]
> 
> * Request from MSFT to include patch to disable CET Shadow Stack on
> SEV-SNP. Due to CPUID emulation bug not being fixed in VMs until
> October 2024, this feature is being disabled in the interim.
> 
> [Fix]
> 
> * Clean cherry-pick SAUCE patch from MSFT tree,
> https://github.com/dcui/linux
> * cdf5cdd: "x86/hyperv: temporarily disable CET SS on SEV-SNP due to
> a paravisor bug"
> 
> [Test Plan]
> 
> * Compile tested
> * Boot tested
> * Microsoft tested
> 
> [Regression potential]
> 
> * Changes isolated, minimal regression risk
> 
> [Other info]
> 
> * SF #00387447
> 
> Dexuan Cui (1):
>   UBUNTU: SAUCE: x86/hyperv: temporarily disable CET SS on SEV-SNP
> due
>     to a paravisor bug
> 
>  arch/x86/kernel/cpu/mshyperv.c | 21 +++++++++++++++++++++
>  1 file changed, 21 insertions(+)
> 
> -- 
> 2.34.1
> 
>
Thibault Ferrante June 13, 2024, 2:26 p.m. UTC | #2
On 12-06-2024 22:27, John Cabaj wrote:
> BugLink: https://bugs.launchpad.net/bugs/2069204
> 
> SRU Justification
> 
> [Impact]
> 
> * Request from MSFT to include patch to disable CET Shadow Stack on SEV-SNP. Due to CPUID emulation bug not being fixed in VMs until October 2024, this feature is being disabled in the interim.
> 
> [Fix]
> 
> * Clean cherry-pick SAUCE patch from MSFT tree, https://github.com/dcui/linux
> * cdf5cdd: "x86/hyperv: temporarily disable CET SS on SEV-SNP due to a paravisor bug"
> 
> [Test Plan]
> 
> * Compile tested
> * Boot tested
> * Microsoft tested
> 
> [Regression potential]
> 
> * Changes isolated, minimal regression risk
> 
> [Other info]
> 
> * SF #00387447
> 
> Dexuan Cui (1):
>    UBUNTU: SAUCE: x86/hyperv: temporarily disable CET SS on SEV-SNP due
>      to a paravisor bug
> 
>   arch/x86/kernel/cpu/mshyperv.c | 21 +++++++++++++++++++++
>   1 file changed, 21 insertions(+)
> 

Acked-by: Thibault Ferrante <thibault.ferrante@canonical.com>

--
Thibault
John Cabaj June 13, 2024, 3:01 p.m. UTC | #3
On 6/12/24 3:27 PM, John Cabaj wrote:
> BugLink: https://bugs.launchpad.net/bugs/2069204
> 
> SRU Justification
> 
> [Impact]
> 
> * Request from MSFT to include patch to disable CET Shadow Stack on SEV-SNP. Due to CPUID emulation bug not being fixed in VMs until October 2024, this feature is being disabled in the interim.
> 
> [Fix]
> 
> * Clean cherry-pick SAUCE patch from MSFT tree, https://github.com/dcui/linux
> * cdf5cdd: "x86/hyperv: temporarily disable CET SS on SEV-SNP due to a paravisor bug"
> 
> [Test Plan]
> 
> * Compile tested
> * Boot tested
> * Microsoft tested
> 
> [Regression potential]
> 
> * Changes isolated, minimal regression risk
> 
> [Other info]
> 
> * SF #00387447
> 
> Dexuan Cui (1):
>   UBUNTU: SAUCE: x86/hyperv: temporarily disable CET SS on SEV-SNP due
>     to a paravisor bug
> 
>  arch/x86/kernel/cpu/mshyperv.c | 21 +++++++++++++++++++++
>  1 file changed, 21 insertions(+)
> 

Applied to noble:linux-azure master-next branch.

Also applied to oracular:linux-azure master-next branch cleanly, though it was missed in the initial patch request.


Thanks,
John