Re: [PATCH] KVM: VMX: Explicitly track TDX VMs' root level instead of guessing it from CPUID
"Edgecombe, Rick P" <[email protected]>
| Newsgroups | dev.linux.lists.linux-coco,org.kernel.vger.kvm,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <[email protected]> |
On Wed, 2026-08-19 at 12:41 -0700, Sean Christopherson wrote: > A theme common to several (not all, but several) of the recent guest- > exploitable vulnerabilities is that KVM *did* have relevant sanity checks, but > KVM didn't actually do anything meaningful when a check failed and/or an > assumption didn't hold true. It's not always possible/desirable to take > evasive action (see below), but in most cases it is. Ah! This is very useful. Thanks