Re: [PATCH v6 1/7] x86/sev: Add support for Alternate Injection
From: Borislav Petkov
Date: Sat Nov 07 2026 - 21:13:01 EST
On Fri, Nov 06, 2026 at 01:25:27AM +0000, Melody Wang wrote:
> The Alternate Injection feature is a method to protect a SNP guest from
> malicious injection attacks. It allows the guest to control the
> interrupt injection.
>
> When this feature is enabled, interrupts are injected with the help of
> an agent called a Secure VM Service Module (SVSM) which executes in the
> security realm of the guest and uses Restricted Injection as the sole
> method to receive interrupts from the hypervisor.
>
> Add support for Alternate Injection.
Just commit message touch ups:
Alternate Injection is a method to protect a SNP guest from malicious injection
attacks by allowing the guest to control the injection.
When this feature is enabled, interrupts are injected with the help of an agent
called a Secure VM Service Module (SVSM) which executes in the security realm of
the guest and uses Restricted Injection as the sole method to receive interrupts
from the hypervisor.
--
Regards/Gruss,
Boris.
https://people.kernel.org/tglx/notes-about-netiquette