On Mon, Apr 14, 2025 at 04:43:26PM -0700, Josh Poimboeuf wrote: > Can we call this ANNOTATE_NOCFI_SAFE or something? I'm hesitant to do so, because some of these sites really are not safe. EFI and VMX interrupt crud really are a security issue. EFI really is unfixable but not less brokene, because the EFI code is out of our control, the VMX thing might be fixable, not sure I understand KVM well enough.