x86/boot/compressed/64: Check SEV encryption in the 32-bit boot-path

commit fef81c86 upstream.

Check whether the hypervisor reported the correct C-bit when running
as an SEV guest. Using a wrong C-bit position could be used to leak
sensitive data from the guest to the hypervisor.

Signed-off-by: Joerg Roedel <jroedel@suse.de>
Signed-off-by: Borislav Petkov <bp@suse.de>
Link: https://lkml.kernel.org/r/20210312123824.306-8-joro@8bytes.org


Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>