Re: [PATCH v6 1/7] x86/sev: Add support for Alternate Injection

From: Borislav Petkov

Date: Sat Nov 07 2026 - 21:13:01 EST


On Fri, Nov 06, 2026 at 01:25:27AM +0000, Melody Wang wrote:
> The Alternate Injection feature is a method to protect a SNP guest from
> malicious injection attacks. It allows the guest to control the
> interrupt injection.
>
> When this feature is enabled, interrupts are injected with the help of
> an agent called a Secure VM Service Module (SVSM) which executes in the
> security realm of the guest and uses Restricted Injection as the sole
> method to receive interrupts from the hypervisor.
>
> Add support for Alternate Injection.

Just commit message touch ups:

Alternate Injection is a method to protect a SNP guest from malicious injection
attacks by allowing the guest to control the injection.

When this feature is enabled, interrupts are injected with the help of an agent
called a Secure VM Service Module (SVSM) which executes in the security realm of
the guest and uses Restricted Injection as the sole method to receive interrupts
from the hypervisor.

--
Regards/Gruss,
Boris.

https://people.kernel.org/tglx/notes-about-netiquette