| Message ID | 20260226-kvm-riscv-spectre-v1-v1-0-5f930ea16691@cispa.de |
|---|---|
| Headers | show
Return-Path:
<kvm-riscv-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org>
X-Original-To: incoming@patchwork.ozlabs.org
Delivered-To: patchwork-incoming@legolas.ozlabs.org
Authentication-Results: legolas.ozlabs.org;
dkim=pass (2048-bit key;
secure) header.d=lists.infradead.org header.i=@lists.infradead.org
header.a=rsa-sha256 header.s=bombadil.20210309 header.b=si+YMy/R;
dkim=fail reason="signature verification failed" (2048-bit key;
unprotected) header.d=cispa.de header.i=@cispa.de header.a=rsa-sha256
header.s=2023-rsa header.b=escqfQNJ;
dkim-atps=neutral
Authentication-Results: legolas.ozlabs.org;
spf=none (no SPF record) smtp.mailfrom=lists.infradead.org
(client-ip=2607:7c80:54:3::133; helo=bombadil.infradead.org;
envelope-from=kvm-riscv-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org;
receiver=patchwork.ozlabs.org)
Received: from bombadil.infradead.org (bombadil.infradead.org
[IPv6:2607:7c80:54:3::133])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)
(No client certificate requested)
by legolas.ozlabs.org (Postfix) with ESMTPS id 4fMD9z6RDWz1xyr
for <incoming@patchwork.ozlabs.org>; Fri, 27 Feb 2026 01:19:50 +1100 (AEDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=lists.infradead.org; s=bombadil.20210309; h=Sender:
Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post:
List-Archive:List-Unsubscribe:List-Id:CC:To:MIME-Version:Message-ID:Date:
Subject:From:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From:
Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:
List-Owner; bh=E36rHoan7e1AX75Yad2KqmVoWNS93GBsWkKyAbXCb5c=; b=si+YMy/RT21IgW
vPPKXsEbDxIA0m0qJJx6jFzCprfiJbi9ouam5jRxSaFGXBxHW2xW1z6vtEp4XUtgboGPGf2SYLlA9
OEEbY3ns2WIWVweC9JIGkpYUXJA+cDi22Rj0QoE1inUcf81Ycnn0eFwh2/x+J/876YxIabwD+6HIc
QgzaHQB/OGmGN7kjheMrsVF+E42yJ21nePSDYGHsTtGsVspOTPRnlk8kRK7pRauBjv6i3GD0dKwoH
HSX+0f2M24LM2Zr4BHfRhDAJLOpjoqBTz5Q+44TIN76hUeBHwKJDmtyvhdRkBCGV2dVrtfc3dXL+T
1OCZ4vWHiva1pVagZoBQ==;
Received: from localhost ([::1] helo=bombadil.infradead.org)
by bombadil.infradead.org with esmtp (Exim 4.98.2 #2 (Red Hat Linux))
id 1vvcDU-00000006Jmh-26ir;
Thu, 26 Feb 2026 14:19:48 +0000
Received: from mx-2023-1.gwdg.de ([134.76.10.21])
by bombadil.infradead.org with esmtps (Exim 4.98.2 #2 (Red Hat Linux))
id 1vvcDP-00000006JOz-0tJj;
Thu, 26 Feb 2026 14:19:47 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=cispa.de;
s=2023-rsa; h=CC:To:Content-Transfer-Encoding:Content-Type:MIME-Version:
Message-ID:Date:Subject:From:Sender:Reply-To:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=yfLVFM+oU/NWcIIH45tixxiV4mTmdtkw+rbkH4ApJwE=; b=escqfQNJFPMIlXL3vrUb8dEfo5
X+GRTkPUpTHVk8PD/UbNdrYubrjlEeBHtbWGGRjRHcLK8QkYw5fTMVlWHWBR4p6y5tDvigyxhOahN
x4rPH1zTXxmwfuVx9j6S1q+AsKukd1XRJO5R8wbLCd3lV+e5urIk4IO/Mp4xivjf2ChMiUl5ZRI60
WZSdkj5ussdfy7woOwm7j8q1d57zLH6yQ7fTz1QsaIssYt9RNN2KxbayVYexfRhzBrw/bCYun8hlP
5OTYp5uE0puOOlxVRa4W1+Z1ZFiCcO3qrqLTy4HohDxYaAdx/mgOgt6QaO++e/ryhxO33ymCc8cXD
s5saVNww==;
Received: from mailer.gwdg.de ([134.76.10.26]:38446)
by mailer.gwdg.de with esmtp (GWDG Mailer)
(envelope-from <lukas.gerlach@cispa.de>)
id 1vvcD5-006EFl-0Q;
Thu, 26 Feb 2026 15:19:23 +0100
Received: from mbx19-sub-05.um.gwdg.de ([10.108.142.70] helo=email.gwdg.de)
by mailer.gwdg.de with esmtps (TLS1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(GWDG Mailer)
(envelope-from <lukas.gerlach@cispa.de>)
id 1vvcD5-0009uO-28;
Thu, 26 Feb 2026 15:19:23 +0100
Received: from
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa
(10.250.9.200) by MBX19-SUB-05.um.gwdg.de (10.108.142.70) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
15.2.2562.37; Thu, 26 Feb 2026 15:19:12 +0100
From: Lukas Gerlach <lukas.gerlach@cispa.de>
Subject: [PATCH 0/4] KVM: riscv: Fix Spectre-v1 vulnerabilities in register
access
Date: Thu, 26 Feb 2026 15:18:57 +0100
Message-ID: <20260226-kvm-riscv-spectre-v1-v1-0-5f930ea16691@cispa.de>
MIME-Version: 1.0
X-B4-Tracking: v=1; b=H4sIAAAAAAAC/x2MSQqAMAwAvyI5G6hFivgV8SBp1CAuJFIE6d8tH
gdm5gVjFTboqxeUk5icR4GmroDW6VgYJRYG73xw3gfc0o4qRgntYrqVMTXYRtdGCh0VA0p6Kc/
y/NthzPkDOosoY2YAAAA=
X-Change-ID: 20260226-kvm-riscv-spectre-v1-4d04dc68c226
To: Anup Patel <anup@brainfault.org>, Atish Patra <atish.patra@linux.dev>,
Paul Walmsley <pjw@kernel.org>, Palmer Dabbelt <palmer@dabbelt.com>, Albert
Ou <aou@eecs.berkeley.edu>, Alexandre Ghiti <alex@ghiti.fr>, Andrew Jones
<ajones@ventanamicro.com>
CC: <kvm@vger.kernel.org>, <kvm-riscv@lists.infradead.org>,
<linux-riscv@lists.infradead.org>, <linux-kernel@vger.kernel.org>, Daniel
Weber <daniel.weber@cispa.de>, Michael Schwarz <michael.schwarz@cispa.de>,
Marton Bognar <marton.bognar@kuleuven.be>, Jo Van Bulck
<jo.vanbulck@kuleuven.be>, Lukas Gerlach <lukas.gerlach@cispa.de>
X-Mailer: b4 0.14.3
X-Developer-Signature: v=1; a=openpgp-sha256; l=953; i=lukas.gerlach@cispa.de;
h=from:subject:message-id; bh=Vz58WHttVcNQG/3Jcd9G0PXWP0L7ogtzIBHgWQI8H8k=;
b=owGbwMvMwCGWoTIjqP/42kTG02pJDJkLwuLbsoSz4hZar4j8WX7Uckm50Llp622yPnpOm6Q21
3rF0tmdHaUsDGIcDLJiiixTBV8z9u1x4EnKPHwOZg4rE8gQBi5OAZjInwKGv/KG3F0zchdXaFpG
6cyt4DS9nLYjjft8cdvZewWCZd3J/gz/a7qUey7kaMbKHH3G4jOjIfy6RdZL9TVGCwQKnNhVOk1
YAA==
X-Developer-Key: i=lukas.gerlach@cispa.de; a=openpgp;
fpr=9511EB018EBC400C6269C3CE682498528FC7AD61
X-Originating-IP: [10.250.9.200]
X-ClientProxiedBy: mbx19-sub-02.um.gwdg.de (10.108.142.55) To
MBX19-SUB-05.um.gwdg.de (10.108.142.70)
X-Virus-Scanned: (clean) by clamav
X-Spam-Level: -
X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3
X-CRM114-CacheID: sfid-20260226_061943_273541_38732C09
X-CRM114-Status: UNSURE ( 4.92 )
X-CRM114-Notice: Please train this message.
X-Spam-Score: -2.3 (--)
X-Spam-Report: Spam detection software,
running on the system "bombadil.infradead.org",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: This series adds array_index_nospec() to RISC-V KVM to
prevent
speculative out-of-bounds access to kernel memory. Similar fixes exist for
x86 (ioapic, lapic,
PMU) and arm64 (vgic). Signed-off-by: Lukas Gerlach <lukas.gerlach@cispa.de>
--- Lukas Gerlach (4): KVM: riscv: Fix Spectre-v1 in ONE_REG register
access
KVM: riscv: Fix Spectre-v1 in AIA CSR access KVM: riscv: Fix Spectre-
[...]
Content analysis details: (-2.3 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.7 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[134.76.10.21 listed in sa-accredit.habeas.com]
-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at https://www.dnswl.org/,
medium trust
[134.76.10.21 listed in list.dnswl.org]
0.3 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[134.76.10.21 listed in bl.score.senderscore.com]
1.2 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[134.76.10.21 listed in
sa-trusted.bondedsender.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK
signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature,
not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's
domain
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
X-BeenThere: kvm-riscv@lists.infradead.org
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: <kvm-riscv.lists.infradead.org>
List-Unsubscribe: <http://lists.infradead.org/mailman/options/kvm-riscv>,
<mailto:kvm-riscv-request@lists.infradead.org?subject=unsubscribe>
List-Archive: <http://lists.infradead.org/pipermail/kvm-riscv/>
List-Post: <mailto:kvm-riscv@lists.infradead.org>
List-Help: <mailto:kvm-riscv-request@lists.infradead.org?subject=help>
List-Subscribe: <http://lists.infradead.org/mailman/listinfo/kvm-riscv>,
<mailto:kvm-riscv-request@lists.infradead.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "kvm-riscv" <kvm-riscv-bounces@lists.infradead.org>
Errors-To: kvm-riscv-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org
|
| Series |
KVM: riscv: Fix Spectre-v1 vulnerabilities in register access
|
expand
|
This series adds array_index_nospec() to RISC-V KVM to prevent speculative out-of-bounds access to kernel memory. Similar fixes exist for x86 (ioapic, lapic, PMU) and arm64 (vgic). Signed-off-by: Lukas Gerlach <lukas.gerlach@cispa.de> --- Lukas Gerlach (4): KVM: riscv: Fix Spectre-v1 in ONE_REG register access KVM: riscv: Fix Spectre-v1 in AIA CSR access KVM: riscv: Fix Spectre-v1 in floating-point register access KVM: riscv: Fix Spectre-v1 in PMU counter access arch/riscv/kvm/aia.c | 11 +++++++++-- arch/riscv/kvm/vcpu_fp.c | 17 +++++++++++++---- arch/riscv/kvm/vcpu_onereg.c | 36 ++++++++++++++++++++++++++++-------- arch/riscv/kvm/vcpu_pmu.c | 4 ++++ 4 files changed, 54 insertions(+), 14 deletions(-) --- base-commit: f4d0ec0aa20d49f09dc01d82894ce80d72de0560 change-id: 20260226-kvm-riscv-spectre-v1-4d04dc68c226 Best regards,