Azure: Fix TDX regressions in Azure 6.5

[Tim Gardner]

SRU Justification

[Impact]

TDX support in Microsoft Azure kernels based on 6.5 has regressed from 6.2. Microsoft has provided a backport that brings TDX functionality back to that of Azure 6.2.

[Test Case]

Microsoft tested

[Regression Potential]

TDX support has been backported from Linux v6.6, so there could be some lingering issues.

[Other Information]

SF: #00378027

[Tim Gardner (timg-tpi)]

https://lists.ubuntu.com/archives/kernel-team/2024-February/148660.html

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

This bug is awaiting verification that the linux-azure/6.5.0-1013.13 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-mantic-linux-azure' to 'verification-done-mantic-linux-azure'. If the problem still exists, change the tag 'verification-needed-mantic-linux-azure' to 'verification-failed-mantic-linux-azure'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-azure - 6.5.0-1015.15

---------------
linux-azure (6.5.0-1015.15) mantic; urgency=medium

  * mantic/linux-azure: 6.5.0-1015.15 -proposed tracker (LP: #2052984)

  * Azure: cifs modules missing from the linux-modules package (LP: #2052980)
    - [Config] Move cifs.ko to linux-modules package

linux-azure (6.5.0-1014.14) mantic; urgency=medium

  * mantic/linux-azure: 6.5.0-1014.14 -proposed tracker (LP: #2052273)

  [ Ubuntu: 6.5.0-21.21 ]

  * mantic/linux: 6.5.0-21.21 -proposed tracker (LP: #2052603)
  * The display becomes frozen after some time when a HDMI device is connected.
    (LP: #2049027)
    - drm/i915/dmc: Don't enable any pipe DMC events
  * partproke is broken on empty loopback device (LP: #2049689)
    - block: Move checking GENHD_FL_NO_PART to bdev_add_partition()
  * CVE-2023-51781
    - appletalk: Fix Use-After-Free in atalk_ioctl
  * CVE-2023-51780
    - atm: Fix Use-After-Free in do_vcc_ioctl
  * CVE-2023-6915
    - ida: Fix crash in ida_free when the bitmap is empty
  * CVE-2024-0565
    - smb: client: fix OOB in receive_encrypted_standard()
  * CVE-2024-0582
    - io_uring: enable io_mem_alloc/free to be used in other parts
    - io_uring/kbuf: defer release of mapped buffer rings
  * CVE-2024-0646
    - net: tls, update curr on splice as well

linux-azure (6.5.0-1013.13) mantic; urgency=medium

  * mantic/linux-azure: 6.5.0-1013.13 -proposed tracker (LP: #2052541)

  * Azure: Fix TDX regressions in Azure 6.5 (LP: #2052519)
    - x86/hyperv: Add sev-snp enlightened guest static key
    - x86/hyperv: Set Virtual Trust Level in VMBus init message
    - x86/hyperv: Mark Hyper-V vp assist page unencrypted in SEV-SNP enlightened
      guest
    - drivers: hv: Mark percpu hvcall input arg page unencrypted in SEV-SNP
      enlightened guest
    - x86/hyperv: Use vmmcall to implement Hyper-V hypercall in sev-snp
      enlightened guest
    - clocksource: hyper-v: Mark hyperv tsc page unencrypted in sev-snp
      enlightened guest
    - x86/hyperv: Add smp support for SEV-SNP guest
    - x86/hyperv: Add hyperv-specific handling for VMMCALL under SEV-ES
    - x86/hyperv: Add missing 'inline' to hv_snp_boot_ap() stub
    - x86/hyperv: Fix undefined reference to isolation_type_en_snp without
      CONFIG_HYPERV
    - x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests
    - x86/hyperv: Support hypercalls for fully enlightened TDX guests
    - Drivers: hv: vmbus: Support fully enlightened TDX guests
    - x86/hyperv: Fix serial console interrupts for fully enlightened TDX guests
    - Drivers: hv: vmbus: Support >64 VPs for a fully enlightened TDX/SNP VM
    - x86/hyperv: Introduce a global variable hyperv_paravisor_present
    - Drivers: hv: vmbus: Bring the post_msg_page back for TDX VMs with the
      paravisor
    - x86/hyperv: Use TDX GHCI to access some MSRs in a TDX VM with the paravisor
    - x86/hyperv: Remove hv_isolation_type_en_snp
    - x86/hyperv: Move the code in ivm.c around to avoid unnecessary ifdef's
    - x86/hyperv: Remove duplicate include
    - x86/tdx: Retry partially-completed page conversion hypercalls
    - x86/mm: Fix memory encryption features advertiseme...