[PATCH v4 03/17] KVM: arm64: Add pkvm_map_private_va_range
Vincent Donnefort
vdonnefort at google.com
Fri Jul 31 07:35:27 PDT 2026
In preparation for the pKVM heap allocator, introduce
pkvm_map_private_va_range() to map a physical range into the pKVM
private range.
Reviewed-by: Fuad Tabba <fuad.tabba at linux.dev>
Tested-by: Fuad Tabba <fuad.tabba at linux.dev>
Signed-off-by: Vincent Donnefort <vdonnefort at google.com>
diff --git a/arch/arm64/kvm/hyp/include/nvhe/mm.h b/arch/arm64/kvm/hyp/include/nvhe/mm.h
index 00cadd13ee5d..ea97ea49820e 100644
--- a/arch/arm64/kvm/hyp/include/nvhe/mm.h
+++ b/arch/arm64/kvm/hyp/include/nvhe/mm.h
@@ -31,6 +31,7 @@ int __pkvm_create_private_mapping(phys_addr_t phys, size_t size,
unsigned long *haddr);
int pkvm_create_stack(phys_addr_t phys, unsigned long *haddr);
int pkvm_alloc_private_va_range(size_t size, unsigned long *haddr);
+int pkvm_map_private_va_range(void *haddr, phys_addr_t phys, size_t size);
phys_addr_t pkvm_private_va_range_pa(void *va);
#endif /* __KVM_HYP_MM_H */
diff --git a/arch/arm64/kvm/hyp/nvhe/mm.c b/arch/arm64/kvm/hyp/nvhe/mm.c
index 9ab7f613fa36..22f6aae42f29 100644
--- a/arch/arm64/kvm/hyp/nvhe/mm.c
+++ b/arch/arm64/kvm/hyp/nvhe/mm.c
@@ -25,6 +25,7 @@ struct memblock_region hyp_memory[HYP_MEMBLOCK_REGIONS];
unsigned int hyp_memblock_nr;
static u64 __io_map_base;
+static u64 __hyp_private_va_start;
struct hyp_fixmap_slot {
u64 addr;
@@ -90,6 +91,41 @@ int pkvm_alloc_private_va_range(size_t size, unsigned long *haddr)
return ret;
}
+/**
+ * pkvm_map_private_va_range() - Map a physical range into the private VA range
+ * @haddr: The virtual address in the private range.
+ * @phys: The physical address to map.
+ * @size: The size of the range to map.
+ *
+ * The hypervisor VA @haddr must have been first allocated with
+ * pkvm_alloc_private_va_range(). The created mapping can later be removed
+ * with pkvm_remove_mappings().
+ *
+ * Return: 0 on success, negative error code on failure.
+ */
+int pkvm_map_private_va_range(void *haddr, phys_addr_t phys, size_t size)
+{
+ unsigned long addr = (unsigned long)haddr;
+ int ret;
+
+ if (!PAGE_ALIGNED(addr | phys | size))
+ return -EINVAL;
+
+ guard(hyp_spinlock)(&pkvm_pgd_lock);
+
+ if (addr < __hyp_private_va_start || addr >= __io_map_base)
+ return -EINVAL;
+
+ if (size > __io_map_base - addr)
+ return -EINVAL;
+
+ ret = kvm_pgtable_hyp_map(&pkvm_pgtable, addr, size, phys, PAGE_HYP);
+ if (ret)
+ kvm_pgtable_hyp_unmap(&pkvm_pgtable, addr, size);
+
+ return ret;
+}
+
/**
* pkvm_private_va_range_pa - Translate a private VA to a physical address.
* @va: The private virtual address to translate.
@@ -168,6 +204,12 @@ int pkvm_create_mappings(void *from, void *to, enum kvm_pgtable_prot prot)
* pkvm_remove_mappings - Remove mappings from the hypervisor page-table
* @from: The starting virtual address of the range to remove
* @to: The ending virtual address of the range to remove
+ *
+ * The range [@from, @to) can be a subset of the range previously mapped by
+ * pkvm_create_mappings(), as the latter enforces PTE-level mappings. However,
+ * it cannot be a subset of a range mapped by pkvm_map_private_va_range() as
+ * that function allows block mappings which the hypervisor page-table does not
+ * split.
*/
void pkvm_remove_mappings(void *from, void *to)
{
@@ -462,6 +504,7 @@ int hyp_create_idmap(u32 hyp_va_bits)
*/
__io_map_base = start & BIT(hyp_va_bits - 2);
__io_map_base ^= BIT(hyp_va_bits - 2);
+ __hyp_private_va_start = __io_map_base;
__hyp_vmemmap = __io_map_base | BIT(hyp_va_bits - 3);
return __pkvm_create_mappings(start, end - start, start, PAGE_HYP_EXEC);
--
2.55.0.508.g3f0d502094-goog
More information about the linux-arm-kernel
mailing list