[PATCH v1 11/28] KVM: SVM: Only flush the fallback ASID when used by a different vCPU

From: Yosry Ahmed

Date: Mon Jul 27 2026 - 20:38:35 EST


Instead of always flushing the fallback ASID on every vCPU run, only
flush it if the last vCPU that used it on the pCPU changes. This avoids
constant TLB flushing on a vCPU using the fallback ASID if no other
vCPUs that use the same ASID ran on the same pCPU.

Note that checking (and flushing) the current ASID on vCPU load is not
sufficient, as it is possible that a vCPU is using the fallback ASID
only for L1 or only for L2. To do this correctly on vCPU load, both L1
and L2 ASIDs would need to be checked, and the respective VMCB would
need to be flushed. This would not be much simpler, and would perform
unnecessary flushes in some cases (e.g. loading a vCPU that uses the
fallback ASID for L2, but L2 doesn't actually run until the vCPU is
unloaded).

Another alternative is always flushing on vCPU load if the current ASID
is the fallback ASID, and flushing on nested transitions if the new ASID
is the fallback ASID. Again, this is not much simpler and also incurs
unnecessary flushes in some cases.

Do the logical thing and track the vCPU using the fallback ASID instead.

Signed-off-by: Yosry Ahmed <yosry@xxxxxxxxxx>
---
arch/x86/kvm/svm/svm.c | 13 ++++++++++++-
arch/x86/kvm/svm/svm.h | 3 +++
2 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/arch/x86/kvm/svm/svm.c b/arch/x86/kvm/svm/svm.c
index 31194c773af7c..30a295785c68a 100644
--- a/arch/x86/kvm/svm/svm.c
+++ b/arch/x86/kvm/svm/svm.c
@@ -1365,6 +1365,8 @@ static int svm_vcpu_create(struct kvm_vcpu *vcpu)
static void svm_vcpu_free(struct kvm_vcpu *vcpu)
{
struct vcpu_svm *svm = to_svm(vcpu);
+ struct svm_cpu_data *sd;
+ int cpu;

WARN_ON_ONCE(!list_empty(&svm->ir_list));

@@ -1377,6 +1379,11 @@ static void svm_vcpu_free(struct kvm_vcpu *vcpu)
svm_vcpu_free_msrpm(svm->msrpm);

free_asid(vcpu, svm->asid);
+
+ for_each_possible_cpu(cpu) {
+ sd = per_cpu_ptr(&svm_data, cpu);
+ cmpxchg(&sd->fallback_asid_vcpu, vcpu, NULL);
+ }
}

#ifdef CONFIG_CPU_MITIGATIONS
@@ -3755,6 +3762,7 @@ static void svm_set_nested_run_soft_int_state(struct kvm_vcpu *vcpu)

static int pre_svm_run(struct kvm_vcpu *vcpu)
{
+ struct svm_cpu_data *sd = this_cpu_ptr(&svm_data);
struct vcpu_svm *svm = to_svm(vcpu);

/*
@@ -3771,8 +3779,11 @@ static int pre_svm_run(struct kvm_vcpu *vcpu)
if (is_sev_guest(vcpu))
return pre_sev_run(svm, vcpu->cpu);

- if (unlikely(svm->vmcb->control.asid == fallback_asid))
+ if (unlikely(svm->vmcb->control.asid == fallback_asid &&
+ sd->fallback_asid_vcpu != vcpu)) {
vmcb_set_flush_asid(svm->vmcb);
+ sd->fallback_asid_vcpu = vcpu;
+ }

return 0;
}
diff --git a/arch/x86/kvm/svm/svm.h b/arch/x86/kvm/svm/svm.h
index a75862e693134..79339ee8a3d56 100644
--- a/arch/x86/kvm/svm/svm.h
+++ b/arch/x86/kvm/svm/svm.h
@@ -375,6 +375,9 @@ struct svm_cpu_data {
struct vmcb *save_area;
unsigned long save_area_pa;

+ /* Last vCPU to use fallback_asid on this CPU */
+ struct kvm_vcpu *fallback_asid_vcpu;
+
/* index = sev_asid, value = vmcb pointer */
struct vmcb **sev_vmcbs;
};
--
2.55.0.229.g6434b31f56-goog