• Jim Mattson's avatar
    kvm: vmx: Flush TLB when the APIC-access address changes · fb6c8198
    Jim Mattson authored
    Quoting from the Intel SDM, volume 3, section 28.3.3.4: Guidelines for
    Use of the INVEPT Instruction:
    
    If EPT was in use on a logical processor at one time with EPTP X, it
    is recommended that software use the INVEPT instruction with the
    "single-context" INVEPT type and with EPTP X in the INVEPT descriptor
    before a VM entry on the same logical processor that enables EPT with
    EPTP X and either (a) the "virtualize APIC accesses" VM-execution
    control was changed from 0 to 1; or (b) the value of the APIC-access
    address was changed.
    
    In the nested case, the burden falls on L1, unless L0 enables EPT in
    vmcs02 when L1 doesn't enable EPT in vmcs12.
    Signed-off-by: default avatarJim Mattson <jmattson@google.com>
    Signed-off-by: default avatarRadim Krčmář <rkrcmar@redhat.com>
    fb6c8198
vmx.c 329 KB