Subject	Fixes and lock cleanup+hardening
Author	seanjc@google.com
Date	2026-03-10 23:48:09 +0000 UTC
Version	Version 1
Cc	clopez@suse.de glider@google.com jethro@fortanix.com kvm@vger.kernel.org linux-kernel@vger.kernel.org pbonzini@redhat.com seanjc@google.com

Patches (21)

Name	Content [All]
[PATCH 01/21] KVM: selftests: Remove duplicate LAUNCH_UPDATE_VMSA call in SEV-ES migrate test	[Body]
[PATCH 02/21] KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU	[Body]
[PATCH 03/21] KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock	[Body]
[PATCH 04/21] KVM: SEV: Disallow LAUNCH_FINISH if vCPUs are actively being created	[Body]
[PATCH 05/21] KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish	[Body]
[PATCH 06/21] KVM: SEV: Lock all vCPUs for the duration of SEV-ES VMSA synchronization	[Body]
[PATCH 07/21] KVM: SEV: Provide vCPU-scoped accessors for detecting SEV+ guests	[Body]
[PATCH 08/21] KVM: SEV: Add quad-underscore version of VM-scoped APIs to detect SEV+ guests	[Body]
[PATCH 09/21] KVM: SEV: Document the SEV-ES check when querying SMM support as "safe"	[Body]
[PATCH 10/21] KVM: SEV: Move standard VM-scoped helpers to detect SEV+ guests to sev.c	[Body]
[PATCH 11/21] KVM: SEV: Move SEV-specific VM initialization to sev.c	[Body]
[PATCH 12/21] KVM: SEV: WARN on unhandled VM type when initializing VM	[Body]
[PATCH 13/21] KVM: SEV: Hide "struct kvm_sev_info" behind CONFIG_KVM_AMD_SEV=y	[Body]
[PATCH 14/21] KVM: SEV: Document that checking for SEV+ guests when reclaiming memory is "safe"	[Body]
[PATCH 15/21] KVM: SEV: Assert that kvm->lock is held when querying SEV+ support	[Body]
[PATCH 16/21] KVM: SEV: use mutex guard in snp_launch_update()	[Body]
[PATCH 17/21] KVM: SEV: use mutex guard in sev_mem_enc_ioctl()	[Body]
[PATCH 18/21] KVM: SEV: use mutex guard in sev_mem_enc_unregister_region()	[Body]
[PATCH 19/21] KVM: SEV: use mutex guard in snp_handle_guest_req()	[Body]
[PATCH 20/21] KVM: SVM: Move lock-protected allocation of SEV ASID into a separate helper	[Body]
[PATCH 21/21] KVM: SEV: Goto an existing error label if charging misc_cg for an ASID fails	[Body]

Sessions