[PATCH] KVM: arm64: Use different pointer authentication keys for pKVM
Oliver Upton
oliver.upton at linux.dev
Tue Jun 13 05:16:02 PDT 2023
On Tue, 16 May 2023 14:15:31 +0000, Mostafa Saleh wrote:
> When the kernel is compiled with CONFIG_ARM64_PTR_AUTH_KERNEL, it
> uses Armv8.3-Pauth for return address protection for the kernel code
> including nvhe code in EL2.
>
> Same keys are used in both kernel(EL1) and nvhe code(EL2), this is
> fine for nvhe but not when running in protected mode(pKVM) as the host
> can't be trusted.
>
> [...]
Applied to kvmarm/next, thanks!
[1/1] KVM: arm64: Use different pointer authentication keys for pKVM
https://git.kernel.org/kvmarm/kvmarm/c/fb737685beee
--
Best,
Oliver
More information about the linux-arm-kernel
mailing list