From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-3.8 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id ADB24C432BE for ; Fri, 20 Aug 2021 10:20:01 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 8EFAA610D2 for ; Fri, 20 Aug 2021 10:20:01 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S239054AbhHTKUi (ORCPT ); Fri, 20 Aug 2021 06:20:38 -0400 Received: from 8bytes.org ([81.169.241.247]:38046 "EHLO theia.8bytes.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S232572AbhHTKUg (ORCPT ); Fri, 20 Aug 2021 06:20:36 -0400 Received: by theia.8bytes.org (Postfix, from userid 1000) id 0BD9F309; Fri, 20 Aug 2021 12:19:56 +0200 (CEST) Date: Fri, 20 Aug 2021 12:19:50 +0200 From: 'Joerg Roedel' To: David Laight Cc: "x86@kernel.org" , Thomas Gleixner , Ingo Molnar , Borislav Petkov , "hpa@zytor.com" , Joerg Roedel , Kees Cook , Andy Lutomirski , Uros Bizjak , Arvind Sankar , Ard Biesheuvel , "linux-kernel@vger.kernel.org" , Fabio Aiuto , "stable@vger.kernel.org" Subject: Re: [PATCH] x86/efi: Restore Firmware IDT in before ExitBootServices() Message-ID: References: <20210820073429.19457-1-joro@8bytes.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, Aug 20, 2021 at 09:02:46AM +0000, David Laight wrote: > So allocate and initialise the Linux IDT - so entries can be added. > But don't execute 'lidt' until later on. The IDT is needed in this path to handle #VC exceptions caused by CPUID instructions. So loading the IDT later is not an option. Regards, Joerg