Re: [PATCH v4 0/9] KVM: TDX: Enable VM-DoS Prevention Features for TDX

From: Xiaoyao Li

Date: Mon Sep 21 2026 - 11:17:19 EST


On 8/19/2026 5:48 PM, Xiaoyao Li wrote:
> Hi all,
>
> This is v4 of the series to enable the Notify VM Exit and Bus Lock VM
> exit for TDX, which fixes the KVM CAP issue related with them and allow
> userspace to actually enable the features.
>
> Compared to v3, this v4 adds 5 more patches. The first 8 patches target
> for stable kernels while only the patch 9 doesn't have to. Patch 1 is a
> single patch to enable Notify VM exit for TDX. Except patch 6, patch
> 2-7 are mandatory for enabling Bus Lock VM exit for TDX in patch 8.
>
> Patch 6 itself is a fix for VMX and is OK for cc stable though maybe not
> necessary. Patch 6 is added to this series since it can help stop Sashiko
> repeating its finding of VMX's pre-existing issue, and it's also necessary
> for patch 9 to consilidate the exit handler for VMX and TDX.
>
> There are other issues of existing code found during previous review, like
> the EPT MISCONFIG handling. Given they are not mandatory for enabling the
> Notify VM exit and Bus Lock VM exit for TDX, the plan is to address them in
> a follow-up series separately.
>
> Please refer to v1 for a full background.
>
> v3: https://lore.kernel.org/all/20260812080229.2481439-1-xiaoyao.li@xxxxxxxxx/
> v2: https://lore.kernel.org/all/20260810112200.2326727-1-xiaoyao.li@xxxxxxxxx/
> v1: https://lore.kernel.org/all/20260805031257.1844914-1-xiaoyao.li@xxxxxxxxx/

Hi Sean,

What's your plan on this series? Can you queue it if it looks good to you? Or
need me to spin a new version to address Binbin and Rick's comments on the
commit message?

Thanks,
-Xiayao