[WIP] [Deepin-Kernel-SIG] [linux 6.6.y] [Arm] [Fromlist] [Security] arm64: Support for Arm CCA in KVM#1520

Closed

Avenger-285714 wants to merge 71 commits into

deepin-community:linux-6.6.yfrom

Avenger-285714:cca-backport-wip

Commits on Mar 1, 2026

KVM: Introduce per-page memory attributes

chao-p
authored and
Avenger-285714
committed
KVM: Add KVM_CREATE_GUEST_MEMFD ioctl() for guest-specific backing memory

sean-jc
authored and
Avenger-285714
committed
KVM: guest-memfd: fix unused-function warning

bonzini
authored and
Avenger-285714
committed
KVM: guest_memfd: Use AS_INACCESSIBLE when creating guest_memfd inode

mdroth
authored and
Avenger-285714
committed
KVM: guest_memfd: pass error up from filemap_grab_folio

bonzini
authored and
Avenger-285714
committed
KVM: guest_memfd: limit overzealous WARN

bonzini
authored and
Avenger-285714
committed
KVM: guest_memfd: Add hook for initializing memory

bonzini
authored and
Avenger-285714
committed
KVM: guest_memfd: extract __kvm_gmem_get_pfn()

bonzini
authored and
Avenger-285714
committed
KVM: guest_memfd: Add interface for populating gmem pages with user data

bonzini
authored and
Avenger-285714
committed
KVM: guest_memfd: Add hook for invalidating memory

mdroth
authored and
Avenger-285714
committed
KVM: interrupt kvm_gmem_populate() on signals

bonzini
authored and
Avenger-285714
committed
KVM: cleanup and add shortcuts to kvm_range_has_memory_attributes()

bonzini
authored and
Avenger-285714
committed
KVM: Allow CPU to reschedule while setting per-page memory attributes

merwick
authored and
Avenger-285714
committed
KVM: Rename CONFIG_KVM_PRIVATE_MEM to CONFIG_KVM_GUEST_MEMFD

Fuad Tabba
authored and
Avenger-285714
committed
KVM: guest_memfd: return folio from __kvm_gmem_get_pfn()

bonzini
authored and
Avenger-285714
committed
KVM: guest_memfd: delay folio_mark_uptodate() until after successful preparation

bonzini
authored and
Avenger-285714
committed
KVM: rename CONFIG_HAVE_KVM_GMEM_* to CONFIG_HAVE_KVM_ARCH_GMEM_*

bonzini
authored and
Avenger-285714
committed
KVM: guest_memfd: let kvm_gmem_populate() operate only on private gfns

bonzini
authored and
Avenger-285714
committed
KVM: Add member to struct kvm_gfn_range to indicate private/shared

Isaku Yamahata
authored and
Avenger-285714
committed
KVM: Rename kvm_slot_can_be_private() to kvm_slot_has_gmem()

Fuad Tabba
authored and
Avenger-285714
committed
KVM: arm64: Refactor user_mem_abort()

Fuad Tabba
authored and
Avenger-285714
committed
KVM: arm64: Handle guest_memfd-backed guest page faults

Fuad Tabba
authored and
Avenger-285714
committed
Fromlist: kvm: arm64: Include kvm_emulate.h in kvm/arm_psci.h

Suzuki K Poulose
authored and
Avenger-285714
committed
Fromlist: arm64: RME: Handle Granule Protection Faults (GPFs)

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Add SMC definitions for calling the RMM

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Add wrappers for RMI calls

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Check for RMI support at KVM init

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Define the user ABI

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Basic infrastructure for creating a realm.

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: kvm: arm64: Don't expose unsupported capabilities for realm guests

Suzuki K Poulose
authored and
Avenger-285714
committed
Fromlist: KVM: arm64: Allow passing machine type in KVM creation

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: RTT tear down

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Activate realm on first VCPU run

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Allocate/free RECs to match vCPUs

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: KVM: arm64: vgic: Provide helper for number of list registers

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Support for the VGIC in realms

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: KVM: arm64: Support timers in realm RECs

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Handle realm enter/exit

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Handle RMI_EXIT_RIPAS_CHANGE

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: KVM: arm64: Handle realm MMIO emulation

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: KVM: arm64: Expose support for private memory

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Allow populating initial contents

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Set RIPAS of initial memslots

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Create the realm descriptor

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Add a VMID allocator for realms

stevenprice-arm
authored and
Avenger-285714
committed

Commits on Mar 2, 2026

KVM: Add KVM_EXIT_MEMORY_FAULT exit to report faults to userspace

chao-p
authored and
Avenger-285714
committed
KVM: x86/mmu: Handle page fault for private memory

chao-p
authored and
Avenger-285714
committed
KVM: guest_memfd: Provide "struct page" as output from kvm_gmem_get_pfn()

sean-jc
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Runtime faulting of memory

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: KVM: arm64: Handle realm VCPU load

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: KVM: arm64: Validate register access for a Realm VM

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: KVM: arm64: Handle Realm PSCI requests

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: KVM: arm64: WARN on injected undef exceptions

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: Don't expose stolen time for realm guests

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: allow userspace to inject aborts

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: support RSI_HOST_CALL

jgouly
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Allow checking SVE on VM instance

Suzuki K Poulose
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Always use 4k pages for realms

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Prevent Device mappings for Realms

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: HACK: Restore per-CPU cpu_armpmu pointer

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm_pmu: Provide a mechanism for disabling the physical IRQ

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Enable PMU support with a realm guest

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Propagate number of breakpoints and watchpoints to userspace

Jean-Philippe Brucker
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Set breakpoint parameters through SET_ONE_REG

Jean-Philippe Brucker
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Initialize PMCR.N with number counter supported by RMM

Jean-Philippe Brucker
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Propagate max SVE vector length from RMM

Jean-Philippe Brucker
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Configure max SVE vector length for a Realm

Jean-Philippe Brucker
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Provide register list for unfinalized RMI RECs

Jean-Philippe Brucker
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Provide accurate register list

Jean-Philippe Brucker
authored and
Avenger-285714
committed
Fromlist: KVM: arm64: Expose KVM_ARM_VCPU_REC to user space

stevenprice-arm
authored and
Avenger-285714
committed
Fromlist: arm64: RMI: Enable realms to be created

stevenprice-arm
authored and
Avenger-285714
committed