L1TF/Linux: detect "running an hypervisor" via lsmod

If the 'kvm_intel' module is loaded, this host can run VMs, and is
hence potentially L1TF-vulnerable.
This commit is contained in:
Dario Faggioli 2019-04-19 15:05:00 +02:00
parent 5e83e2cfa4
commit e819a27939
1 changed files with 4 additions and 0 deletions

View File

@ -3797,6 +3797,10 @@ check_CVE_2018_3646_linux()
if [ "$has_vmm" = -1 ]; then
# Assumed to be running on bare metal unless evidence of vm is found.
has_vmm=0
# if we have the 'kvm_intel' module loaded, well, we defintely can run VMs!
if lsmod | grep -q kvm_intel; then
has_vmm=1
fi
# test for presence of hypervisor flag - definitive if set
if [ -e "$procfs/cpuinfo" ] && grep ^flags "$procfs/cpuinfo" | grep -qw hypervisor; then
has_vmm=1