Re: [PATCH v4 0/9] KVM: TDX: Enable VM-DoS Prevention Features for TDX

From: Xiaoyao Li

Date: Mon Sep 21 2026 - 22:04:24 EST


On 9/22/2026 7:51 AM, Sean Christopherson wrote:
> On Mon, Sep 21, 2026, Xiaoyao Li wrote:
>> On 8/19/2026 5:48 PM, Xiaoyao Li wrote:
>>> Hi all,
>>>
>>> This is v4 of the series to enable the Notify VM Exit and Bus Lock VM
>>> exit for TDX, which fixes the KVM CAP issue related with them and allow
>>> userspace to actually enable the features.
>>>
>>> Compared to v3, this v4 adds 5 more patches. The first 8 patches target
>>> for stable kernels while only the patch 9 doesn't have to. Patch 1 is a
>>> single patch to enable Notify VM exit for TDX. Except patch 6, patch
>>> 2-7 are mandatory for enabling Bus Lock VM exit for TDX in patch 8.
>>>
>>> Patch 6 itself is a fix for VMX and is OK for cc stable though maybe not
>>> necessary. Patch 6 is added to this series since it can help stop Sashiko
>>> repeating its finding of VMX's pre-existing issue, and it's also necessary
>>> for patch 9 to consilidate the exit handler for VMX and TDX.
>>>
>>> There are other issues of existing code found during previous review, like
>>> the EPT MISCONFIG handling. Given they are not mandatory for enabling the
>>> Notify VM exit and Bus Lock VM exit for TDX, the plan is to address them in
>>> a follow-up series separately.
>>>
>>> Please refer to v1 for a full background.
>>>
>>> v3: https://lore.kernel.org/all/20260812080229.2481439-1-xiaoyao.li@xxxxxxxxx/
>>> v2: https://lore.kernel.org/all/20260810112200.2326727-1-xiaoyao.li@xxxxxxxxx/
>>> v1: https://lore.kernel.org/all/20260805031257.1844914-1-xiaoyao.li@xxxxxxxxx/
>>
>> Hi Sean,
>>
>> What's your plan on this series? Can you queue it if it looks good to you? Or
>> need me to spin a new version to address Binbin and Rick's comments on the
>> commit message?
>
> Get it applied, with some tweaks. I.e. no v5 necessary.

Thanks!