Re: [PATCH] KVM: VMX: Explicitly track TDX VMs' root level instead of guessing it from CPUID

[Edgecombe, Rick P]

On Wed, 2026-08-19 at 12:41 -0700, Sean Christopherson wrote:
> A theme common to several (not all, but several) of the recent guest-
> exploitable vulnerabilities is that KVM *did* have relevant sanity checks, but
> KVM didn't actually do anything meaningful when a check failed and/or an
> assumption didn't hold true.  It's not always possible/desirable to take
> evasive action (see below), but in most cases it is.

Ah! This is very useful. Thanks