On Mon, Aug 11, 2025, Chao Gao wrote: > Add consistency checks for CR4.CET and CR0.WP in guest-state or host-state > area in the VMCS12. This ensures that configurations with CR4.CET set and > CR0.WP not set result in VM-entry failure, aligning with architectural > behavior. The consistency check patches need to land before KVM lets L1 enable CET for L2.