Re: stable backports for "KVM: x86: Fix shadow paging use-after-free due to unexpected GFN"

From: Nathan Gao

Date: Thu Jun 25 2026 - 18:05:58 EST


Thanks Paolo! I tested these in the context of Amazon Linux, carrying the
series as a downstream patch set on top of our 5.10 and 5.15 trees, as
follows.

Test setup
- Trees: Amazon Linux 5.10 and 5.15, with the backports applied as
downstream patches. (For 5.10, applied a83e50d86^..d3d0e6688; for 5.15,
applied 4db658c99^..1ab8cd246)
- For each tree we ran with EPT enabled and disabled, i.e.
sudo rmmod kvm_intel && sudo modprobe kvm_intel ept=0
and confirmed via /sys/module/kvm_intel/parameters/ept.
- Tested with AWS EC2 c5.metal.

Tests
- KVM selftests: make -C tools/testing/selftests/kvm run_tests
- kvm-unit-tests: https://www.linux-kvm.org/page/KVM-unit-tests

For each (tree x EPT setting) we collected results before and after
applying the backport and compared them.

Results
- No regressions. On both 5.10 and 5.15, and with EPT on and off, the
test outcomes are the same before and after the backport.
- kvm-unit-tests output was identical before vs. after.
- The KVM selftest verdicts (ok/not ok) were identical before vs. after.
The handful of failing tests are pre-existing on our baseline and
unrelated to the MMU change (e.g. debug_regs, vmx_pmu_msrs_test, a
memslot_perf_test timeout, etc.).

So from these tests, the backport looks good. Please let me know if
there are any other tests I can help with.

Tested-by: Nathan Gao <zcgao@xxxxxxxxxx>

Thanks,
Nathan Gao