KVM: nVMX: advertise MBEC to nested guests

Browse source

Advertise SECONDARY_EXEC_MODE_BASED_EPT_EXEC (MBEC) to userspace, which
allows userspace to expose and advertise the feature to the guest.

When MBEC is enabled by the guest, it is passed to the MMU via cr4_smep,
and to the processor by the merging of vmcs12->secondary_vm_exec_control
into the VMCS02's secondary VM execution controls.

Signed-off-by: Jon Kohler <jon@nutanix.com>
Message-ID: <20251223054806.1611168-9-jon@nutanix.com>
Tested-by: David Riley <d.riley@proxmox.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>

...

This commit is contained in:

Jon Kohler 2026-04-08 11:42:09 -04:00 • committed by Paolo Bonzini

parent d220bcf026

commit 606ddbfb4c

4 changed files with 22 additions and 8 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

arch/x86/kvm/mmu.h

View file

7

arch/x86/kvm/mmu/mmu.c

View file

10

arch/x86/kvm/mmu/spte.c

View file

11

arch/x86/kvm/vmx/nested.c

View file