Re: [PATCH] KVM: VMX: Explicitly track TDX VMs' root level instead of guessing it from CPUID
From: "Edgecombe, Rick P" <rick.p.edgecombe@intel.com>
Date: 2026-08-19 22:36:13
Also in:
kvm, lkml
On Wed, 2026-08-19 at 12:41 -0700, Sean Christopherson wrote:
A theme common to several (not all, but several) of the recent guest- exploitable vulnerabilities is that KVM *did* have relevant sanity checks, but KVM didn't actually do anything meaningful when a check failed and/or an assumption didn't hold true. It's not always possible/desirable to take evasive action (see below), but in most cases it is.
Ah! This is very useful. Thanks