Re: [PATCH 2/2] KVM: SVM: Re-check enc_context_owner under the owner's lock in sev_vm_destroy()

On 8/6/26 16:30, Paolo Bonzini wrote:
> The patch narrows the window, but the cleanest fix for both issues is to
> stop protecting enc_context_owner/mirror_vms with the owner's kvm->lock,
> and use a global lock instead.  This also fixes the other issue, so I'll
> send a patch.

Good point — the re-check can never run before the UAF itself, so 2/2
only narrowed the window. Please drop it.

Thanks,
Shen