Linux kernel (KVM SVM) vulnerabilities

In the Linux kernel's KVM SVM, the check for whether an MSR access is intercepted uses the MSR permission bitmap of the active VMCB instead of assuming vmcb02's bitmap is always used. KVM uses msrpm02 only when L1 wants to intercept MSR accesses.

In the Linux kernel's KVM SVM, a failed VMRUN resets the VMCB's TLB control, effectively dropping the requested TLB flush. The fix preserves TLB control on failed VMRUN and tracks the need to flush all ASIDs on a per-CPU basis.

In the Linux kernel's KVM SVM, the control.erap_ctl and control.clean fields in the VMCB are not updated when VMRUN fails. Per AMD, there is no guarantee that requested actions were performed, so updating these fields can mislead KVM.