On Wed, Aug 06, 2025, John Allen wrote: > On Fri, Jul 04, 2025 at 01:49:50AM -0700, Chao Gao wrote: > > diff --git a/arch/x86/kvm/svm/svm.c b/arch/x86/kvm/svm/svm.c > > index 803574920e41..6375695ce285 100644 > > --- a/arch/x86/kvm/svm/svm.c > > +++ b/arch/x86/kvm/svm/svm.c > > @@ -5223,6 +5223,10 @@ static __init void svm_set_cpu_caps(void) > > kvm_caps.supported_perf_cap = 0; > > kvm_caps.supported_xss = 0; > > > > + /* KVM doesn't yet support CET virtualization for SVM. */ > > + kvm_cpu_cap_clear(X86_FEATURE_SHSTK); > > + kvm_cpu_cap_clear(X86_FEATURE_IBT); > > + > > Since AMD isn't supporting IBT, Isn't supporting IBT, yet. :-) I totally believe that AMD doesn't have any plans to support IBT, but unless IBT virtualization would Just Work (would it?), we should leave this in, because being paranoid is basically free. > not sure if it makes sense to clear IBT here since it doesn't look like we're > clearing other features that we don't support in hardware. For compatibility, > my series just removes both lines here, but the IBT clearing is probably not > needed in this series.