Re: [PATCH v7 00/26] Nested SVM fixes, cleanups, and hardening
From: Sean Christopherson
Date: Thu Mar 05 2026 - 12:21:15 EST
On Tue, 03 Mar 2026 00:33:54 +0000, Yosry Ahmed wrote:
> A group of semi-related fixes, cleanups, and hardening patches for nSVM.
> The series is essentially a group of related mini-series stitched
> together for syntactic and semantic dependencies. The first 17 patches
> (except patch 3) are all optimistically CC'd to stable as they are fixes
> or refactoring leading up to bug fixes. Although I am not sure how much
> of that will actually apply to stable trees.
>
> [...]
Applied to kvm-x86 nested, thanks!
[01/26] KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12
https://github.com/kvm-x86/linux/commit/b53ab5167a81
[02/26] KVM: SVM: Switch svm_copy_lbrs() to a macro
https://github.com/kvm-x86/linux/commit/361dbe8173c4
[03/26] KVM: SVM: Add missing save/restore handling of LBR MSRs
https://github.com/kvm-x86/linux/commit/3700f0788da6
[04/26] KVM: selftests: Add a test for LBR save/restore (ft. nested)
https://github.com/kvm-x86/linux/commit/ac17892e5152
[05/26] KVM: nSVM: Always inject a #GP if mapping VMCB12 fails on nested VMRUN
https://github.com/kvm-x86/linux/commit/01ddcdc55e09
[06/26] KVM: nSVM: Refactor checking LBRV enablement in vmcb12 into a helper
https://github.com/kvm-x86/linux/commit/290c8d82023a
[07/26] KVM: nSVM: Refactor writing vmcb12 on nested #VMEXIT as a helper
https://github.com/kvm-x86/linux/commit/dcf3648ab714
[08/26] KVM: nSVM: Triple fault if mapping VMCB12 fails on nested #VMEXIT
https://github.com/kvm-x86/linux/commit/1b30e7551767
[09/26] KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT
https://github.com/kvm-x86/linux/commit/5d291ef0585e
[10/26] KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID)
https://github.com/kvm-x86/linux/commit/f85a6ce06e4a
[11/26] KVM: nSVM: Clear EVENTINJ fields in vmcb12 on nested #VMEXIT
https://github.com/kvm-x86/linux/commit/69b721a86d0d
[12/26] KVM: nSVM: Clear tracking of L1->L2 NMI and soft IRQ on nested #VMEXIT
https://github.com/kvm-x86/linux/commit/8998e1d012f3
[13/26] KVM: nSVM: Drop nested_vmcb_check_{save/control}() wrappers
https://github.com/kvm-x86/linux/commit/b786e34cde42
[14/26] KVM: nSVM: Drop the non-architectural consistency check for NP_ENABLE
https://github.com/kvm-x86/linux/commit/e0b6f031d64c
[15/26] KVM: nSVM: Add missing consistency check for nCR3 validity
https://github.com/kvm-x86/linux/commit/b71138fcc362
[16/26] KVM: nSVM: Add missing consistency check for EFER, CR0, CR4, and CS
https://github.com/kvm-x86/linux/commit/96bd3e76a171
[17/26] KVM: nSVM: Add missing consistency check for EVENTINJ
https://github.com/kvm-x86/linux/commit/7e79f71bca5c
[18/26] KVM: SVM: Rename vmcb->nested_ctl to vmcb->misc_ctl
https://github.com/kvm-x86/linux/commit/1aea80dd42cf
[19/26] KVM: SVM: Rename vmcb->virt_ext to vmcb->misc_ctl2
https://github.com/kvm-x86/linux/commit/7e6eab9be220
[20/26] KVM: nSVM: Cache all used fields from VMCB12
https://github.com/kvm-x86/linux/commit/84dc9fd0354d
[21/26] KVM: nSVM: Restrict mapping vmcb12 on nested VMRUN
https://github.com/kvm-x86/linux/commit/b709087e9e54
[22/26] KVM: nSVM: Use PAGE_MASK to drop lower bits of bitmap GPAs from vmcb12
https://github.com/kvm-x86/linux/commit/a2b858051cf0
[23/26] KVM: nSVM: Sanitize TLB_CONTROL field when copying from vmcb12
https://github.com/kvm-x86/linux/commit/30a1d2fa8190
[24/26] KVM: nSVM: Sanitize INT/EVENTINJ fields when copying from vmcb12
https://github.com/kvm-x86/linux/commit/c8123e827256
[25/26] KVM: nSVM: Only copy SVM_MISC_ENABLE_NP from VMCB01's misc_ctl
https://github.com/kvm-x86/linux/commit/b6dc21d896a0
[26/26] KVM: selftest: Add a selftest for VMRUN/#VMEXIT with unmappable vmcb12
https://github.com/kvm-x86/linux/commit/5e4c6da0bb92
--
https://github.com/kvm-x86/linux/tree/next