[PATCH v3 0/4] KVM: TDX: Enable VM-DoS Prevention Features for TDX
From: Xiaoyao Li
Date: Wed Aug 12 2026 - 04:07:48 EST
Hi all,
This is v3 of the series to enable the Notify VM Exit and Bus Lock VM
exit for TDX, which fixes the KVM CAP issue related with them and allow
userspace to actually enable the features.
It still tries to keep the series as small as possible because it's
targeted for being backported to stable kenrels. This v3 splits the
patch2 of v2 into two patches (patch2 and patch3 in this v3) to make them
easier for review. There are other issues of existing code found during
previous review but not mandatory for this series. The plan is to address
them in followup series separately.
Please refer to v1 for a full background.
v2: https://lore.kernel.org/all/20260810112200.2326727-1-xiaoyao.li@xxxxxxxxx/
v1: https://lore.kernel.org/all/20260805031257.1844914-1-xiaoyao.li@xxxxxxxxx/
Xiaoyao Li (4):
KVM: TDX: Enable Notify VM exit
KVM: TDX: Set bits 31:16 to 0 for the synthesized Exit Reason
KVM: TDX: Don't assume exit_reason[31:16] as all-0 in
tdx_to_vmx_exit_reason()
KVM: TDX: Enable Bus Lock VM exit
arch/x86/kvm/vmx/common.h | 19 ++++++++++
arch/x86/kvm/vmx/tdx.c | 75 +++++++++++++++++++++++++++++++--------
arch/x86/kvm/vmx/vmx.c | 15 ++------
arch/x86/kvm/vmx/vmx.h | 1 +
4 files changed, 82 insertions(+), 28 deletions(-)
base-commit: 1b731e5ded480bd1e5546aed35584238661ce72e
--
2.43.0