From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pj1-f74.google.com (mail-pj1-f74.google.com [209.85.216.74]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 2AB2E33987 for ; Thu, 30 Oct 2025 00:29:10 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.216.74 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1761784152; cv=none; b=dRXWZcFkEe5QOXo6aenIq4mUI0Qnig7gzu7KJXHIZ7FeFspoWWa42LIXIYwpaNiW2ynjJnk6pjIxX0dVfli+Xr8UIYxoS8jBjwJcgdGuBHnEEDojflcDowD62u7a+HjacokNZM+oYV3yDkoxn1WbfwL7z8z9tiRjmwdaZaTYy2c= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1761784152; c=relaxed/simple; bh=IkJ6WMBTGrVBxgIBRaidIdM4Yc61NPhgAuDkcelvNGo=; h=Date:In-Reply-To:Mime-Version:References:Message-ID:Subject:From: To:Cc:Content-Type; b=ENN/rln64I92+nNUZ1SFW3RRfPR//6fXni7Sal8YFkpzRTD0pKqv0O86UAJRWvFkWk6TKs+giMOBlCj8MMpDrnnyAU9njL+U8LD8F/2Zo1DkUiLcfsgYUoMkwNqEAikwd7+A5vdXqzTG1l7tkAKV0jATBP8hRgTotG3pJ67MzYc= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=flex--seanjc.bounces.google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=gSIybInV; arc=none smtp.client-ip=209.85.216.74 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--seanjc.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="gSIybInV" Received: by mail-pj1-f74.google.com with SMTP id 98e67ed59e1d1-3304def7909so420564a91.3 for ; Wed, 29 Oct 2025 17:29:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1761784150; x=1762388950; darn=vger.kernel.org; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:from:to:cc:subject:date:message-id:reply-to; bh=h8trZMp6xkPXOE6vxOAKGI3QwsIAYM3Kj5aUZgfH7Q4=; b=gSIybInVXsO5yVuG5e3SOBaIEmlZxmTFDbGBgd8eMk9UHY0J10I0+XE/9IXPHWmDgs MBxWus9X+CnOTD3o7UgnD0pgr7lMEG0tq99nf9cZpCPEmM2iuzOUPPtVWMpE/Tc9ZtMX vsSKUO3UfCUsmBXCRKRvvFtCJn3eKYjNzHaPjLrW7S8RqDSzBYkeD4KZNXgzc4/A1L6E LbbtftQMvN3aJhzIUj+biqoYTL8n6r88KqqETIgGaf7hFjOd1jgg/68wPdPPMFUqnJAK rYb8zj3u9z8Z0NA8B70h58yswKvISo/nVe3/Dkn4zE8lInOhhZi3jgvrbmThO8Exo/fL QAYg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1761784150; x=1762388950; h=cc:to:from:subject:message-id:references:mime-version:in-reply-to :date:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=h8trZMp6xkPXOE6vxOAKGI3QwsIAYM3Kj5aUZgfH7Q4=; b=qwDnwt/zM50yoKz3UxDMD2C8GLoKUWNxE2zhLuj4nYsfJk6pKTaqZpufSYabRAiT1E dt3TI8le7y0PjvLe2SpbiD/x8SUSqb3Ee52lQgfj8A4DExZaItLIl/R1cQSt2VGal3Hb oDw+z4RWGMD9sK1KuYfEONT8QTAu01cbQP/ZuN0SyImgS5ER61Uz93cBfSY2qxGyn8PU wXb81KrGUtrKRPp6zVcMrMT/K12DuCixkB/qyGn7TX7OS1pWixJ6NWAfQIuwH0NB8tLv QKukoctdpXVfFvLXiPQpNewRe3qmNCv+zh1ph2t4QALrGdmHdHlOaPofPXM2Ob8e8JQp Kikg== X-Forwarded-Encrypted: i=1; AJvYcCXInww6OD2pn8v//7Vr+uquaTr+y9qi6p2BHnOQ5csEAjVKrW2mlqsgOPYKSC9uIYQZrMoU3sM+ykuGabk=@vger.kernel.org X-Gm-Message-State: AOJu0YyiIXlZDM6EnEgKQEGSF1aMhASD7zOo65AcyhCnUyfBrCf7jd5r qRFCJhT5zjVc+UHY5NMRn9/UwP7eh22qyLjTO9ZQebsAxlhrhtcl3SKbO/XbuW/qFsEn9VA9mBP pZvMQsw== X-Google-Smtp-Source: AGHT+IEzRzzR2WXgH/sykv+W6W4Cap4yoCVR7DOB6Kie+N47XHeh5QxUDLeuGLOlEZd4Wopinxa9w7abyZQ= X-Received: from pjug14.prod.google.com ([2002:a17:90a:ce8e:b0:334:1843:ee45]) (user=seanjc job=prod-delivery.src-stubby-dispatcher) by 2002:a17:90b:3ccb:b0:340:299d:f746 with SMTP id 98e67ed59e1d1-3404c3d7690mr1559614a91.8.1761784150386; Wed, 29 Oct 2025 17:29:10 -0700 (PDT) Date: Wed, 29 Oct 2025 17:29:08 -0700 In-Reply-To: <20251029-verw-vm-v1-0-babf9b961519@linux.intel.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 References: <20251029-verw-vm-v1-0-babf9b961519@linux.intel.com> Message-ID: Subject: Re: [PATCH 0/3] Unify VERW mitigation for guests From: Sean Christopherson To: Pawan Gupta Cc: Thomas Gleixner , Borislav Petkov , Peter Zijlstra , Josh Poimboeuf , Ingo Molnar , Dave Hansen , x86@kernel.org, "H. Peter Anvin" , Paolo Bonzini , linux-kernel@vger.kernel.org, kvm@vger.kernel.org, Tao Zhang , Jim Mattson , Brendan Jackman Content-Type: text/plain; charset="us-ascii" On Wed, Oct 29, 2025, Pawan Gupta wrote: > --- > Pawan Gupta (3): > x86/bugs: Use VM_CLEAR_CPU_BUFFERS in VMX as well > x86/mmio: Rename cpu_buf_vm_clear to cpu_buf_vm_clear_mmio_only > x86/mmio: Unify VERW mitigation for guests > > arch/x86/include/asm/nospec-branch.h | 2 +- > arch/x86/kernel/cpu/bugs.c | 17 +++++++++++------ > arch/x86/kvm/mmu/spte.c | 2 +- > arch/x86/kvm/vmx/run_flags.h | 12 ++++++------ > arch/x86/kvm/vmx/vmenter.S | 8 +++++++- > arch/x86/kvm/vmx/vmx.c | 26 ++++++++++---------------- > 6 files changed, 36 insertions(+), 31 deletions(-) > --- Any objection to taking these through the KVM tree when they're ready? There will be a conflict in vmx.c with an L1TF related cleanup, and that conflict is actually helpful in that the two series feed off each other a little bit.