Re: [PATCH v6 7/9] x86/vmscape: Deploy BHB clearing mitigation

From: Nikolay Borisov

Date: Thu Dec 11 2025 - 09:26:31 EST




On 2.12.25 г. 8:20 ч., Pawan Gupta wrote:
IBPB mitigation for VMSCAPE is an overkill on CPUs that are only affected
by the BHI variant of VMSCAPE. On such CPUs, eIBRS already provides
indirect branch isolation between guest and host userspace. However, branch
history from guest may also influence the indirect branches in host
userspace.

To mitigate the BHI aspect, use clear_bhb_loop().

Signed-off-by: Pawan Gupta <pawan.kumar.gupta@xxxxxxxxxxxxxxx>

Reviewed-by: Nikolay Borisov <nik.borisov@xxxxxxxx>