[PATCH v2 0/3] KVM: TDX: Enable VM-DoS Prevention Features for TDX

From: Xiaoyao Li

Date: Mon Aug 10 2026 - 07:27:30 EST


Hi all,

This is v2 of the series to enable the Notify VM Exit and Bus Lock VM
exit for TDX, which fixes the KVM CAP issue related with them and allow
userspace to actually enable the features.

This v2 tries to keep the series as small as possible and it adds one
more patch, patch 02, because it's targeted for being backported to
stable kenrels. The comments on v1 that are not addressed by this series
will be handled in followup series separately, such as renaming notify vm
exit to instruction timout, tdx fast exit handler and vp_enter_ret
handling, etc.

Please refer to v1 for a full background.

v1: https://lore.kernel.org/all/20260805031257.1844914-1-xiaoyao.li@xxxxxxxxx/

Xiaoyao Li (3):
KVM: TDX: Enable Notify VM exit
KVM: TDX: Fix the exit reason handling
KVM: TDX: Enable Bus Lock VM exit

arch/x86/kvm/vmx/common.h | 19 ++++++++++
arch/x86/kvm/vmx/tdx.c | 73 +++++++++++++++++++++++++++++++--------
arch/x86/kvm/vmx/vmx.c | 15 ++------
arch/x86/kvm/vmx/vmx.h | 1 +
4 files changed, 80 insertions(+), 28 deletions(-)

--
2.43.0