[Midnightbsd-cvs] [MidnightBSD/src] 8a71f9: A number of AMD virtualization instructions operat...

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 8a71f9b0b85057c3b7687cd945f169c75ef2c5ec
      https://github.com/MidnightBSD/src/commit/8a71f9b0b85057c3b7687cd945f169c75ef2c5ec
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2020-09-15 (Tue, 15 Sep 2020)

  Changed paths:
    M sys/amd64/vmm/amd/svm.c
    M sys/amd64/vmm/amd/vmcb.h

  Log Message:
  -----------
  A number of AMD virtualization instructions operate on host physical
addresses, are not subject to nested page table translation, and guest use of
these instructions was not trapped.

- From kernel mode a malicious guest can write to arbitrary host memory (with
some constraints), affording the guest full control of the host.