Subject	KVM: x86: Add a paranoid mode for CPUID verification
Author	binbin.wu@linux.intel.com
Date	2026-04-17 07:35:44 +0000 UTC
Version	Version 1
Cc	binbin.wu@linux.intel.com chao.gao@intel.com kai.huang@intel.com kvm@vger.kernel.org pbonzini@redhat.com rick.p.edgecombe@intel.com seanjc@google.com xiaoyao.li@intel.com

Patches (27)

Name	Content [All]
[RFC PATCH 01/27] KVM: x86: Fix emulated CPUID features being applied to wrong sub-leaf	[Body]
[RFC PATCH 02/27] KVM: x86: Reorder the features for CPUID 7	[Body]
[RFC PATCH 03/27] KVM: x86: Add definitions for CPUID overlays	[Body]
[RFC PATCH 04/27] KVM: x86: Extend F() and its variants for CPUID overlays	[Body]
[RFC PATCH 05/27] KVM: x86: Extend kvm_cpu_cap_{set/clear}() to configure overlays	[Body]
[RFC PATCH 06/27] KVM: x86: Populate TDX CPUID overlay with supported feature bits	[Body]
[RFC PATCH 07/27] KVM: x86: Support KVM_GET_{SUPPORTED,EMULATED}_CPUID as VM scope ioctls	[Body]
[RFC PATCH 08/27] KVM: x86: Thread @kvm to KVM CPU capability helpers	[Body]
[RFC PATCH 09/27] KVM: x86: Use overlays of KVM CPU capabilities	[Body]
[RFC PATCH 10/27] KVM: x86: Use vendor-specific overlay flags instead of F_CPUID_DEFAULT	[Body]
[RFC PATCH 11/27] KVM: SVM: Drop unnecessary clears of unsupported common x86 features	[Body]
[RFC PATCH 12/27] KVM: x86: Split KVM CPU cap leafs into two parts	[Body]
[RFC PATCH 13/27] KVM: x86: Add a helper to initialize CPUID multi-bit fields	[Body]
[RFC PATCH 14/27] KVM: x86: Add a helper to init multiple feature bits based on raw CPUID	[Body]
[RFC PATCH 15/27] KVM: x86: Add infrastructure to track CPUID entries ignored in paranoid mode	[Body]
[RFC PATCH 16/27] KVM: x86: Init allowed masks for basic CPUID range in paranoid mode	[Body]
[RFC PATCH 17/27] KVM: x86: Init allowed masks for extended CPUID range in paranoid mode	[Body]
[RFC PATCH 18/27] KVM: x86: Handle Centaur CPUID leafs in paranoid mode	[Body]
[RFC PATCH 19/27] KVM: x86: Track KVM PV CPUID features for paranoid mode	[Body]
[RFC PATCH 20/27] KVM: x86: Add per-VM flag to track CPUID paranoid mode	[Body]
[RFC PATCH 21/27] KVM: x86: Make kvm_vcpu_after_set_cpuid() return an error code	[Body]
[RFC PATCH 22/27] KVM: x86: Verify userspace CPUID inputs in paranoid mode	[Body]
[RFC PATCH 23/27] KVM: x86: Account for runtime CPUID features in paranoid mode	[Body]
[RFC PATCH 24/27] KVM: x86: Skip paranoid CPUID check for KVM PV leafs when base is relocated	[Body]
[RFC PATCH 25/27] KVM: x86: Add new KVM_CAP_X86_CPUID_PARANOID	[Body]
[RFC PATCH 26/27] KVM: x86: Add a helper to query the allowed CPUID mask	[Body]
[RFC PATCH 27/27] KVM: TDX: Replace hardcoded CPUID filtering with the allowed mask	[Body]

Sessions