Re: [PATCH v4 0/9] KVM: TDX: Enable VM-DoS Prevention Features for TDX

From: Sean Christopherson

Date: Mon Sep 21 2026 - 19:51:49 EST


On Mon, Sep 21, 2026, Xiaoyao Li wrote:
> On 8/19/2026 5:48 PM, Xiaoyao Li wrote:
> > Hi all,
> >
> > This is v4 of the series to enable the Notify VM Exit and Bus Lock VM
> > exit for TDX, which fixes the KVM CAP issue related with them and allow
> > userspace to actually enable the features.
> >
> > Compared to v3, this v4 adds 5 more patches. The first 8 patches target
> > for stable kernels while only the patch 9 doesn't have to. Patch 1 is a
> > single patch to enable Notify VM exit for TDX. Except patch 6, patch
> > 2-7 are mandatory for enabling Bus Lock VM exit for TDX in patch 8.
> >
> > Patch 6 itself is a fix for VMX and is OK for cc stable though maybe not
> > necessary. Patch 6 is added to this series since it can help stop Sashiko
> > repeating its finding of VMX's pre-existing issue, and it's also necessary
> > for patch 9 to consilidate the exit handler for VMX and TDX.
> >
> > There are other issues of existing code found during previous review, like
> > the EPT MISCONFIG handling. Given they are not mandatory for enabling the
> > Notify VM exit and Bus Lock VM exit for TDX, the plan is to address them in
> > a follow-up series separately.
> >
> > Please refer to v1 for a full background.
> >
> > v3: https://lore.kernel.org/all/20260812080229.2481439-1-xiaoyao.li@xxxxxxxxx/
> > v2: https://lore.kernel.org/all/20260810112200.2326727-1-xiaoyao.li@xxxxxxxxx/
> > v1: https://lore.kernel.org/all/20260805031257.1844914-1-xiaoyao.li@xxxxxxxxx/
>
> Hi Sean,
>
> What's your plan on this series? Can you queue it if it looks good to you? Or
> need me to spin a new version to address Binbin and Rick's comments on the
> commit message?

Get it applied, with some tweaks. I.e. no v5 necessary.