Subject	VBS/VSM-on-KVM: VBS integration for KVM VM planes
Author	snambakam@linux.microsoft.com
Date	2026-08-05 11:02:43 +0000 UTC
Version	Version 1
Cc	kvm@vger.kernel.org linux-kernel@vger.kernel.org snambakam@linux.microsoft.com

Patches (42)

Name	Content [All]
[RFC PATCH v1 01/42] Fix merge issue - Remove duplicate definition for kvm_arch_has_irq_bypass	[Body]
[RFC PATCH v1 02/42] Fix compilation	[Body]
[RFC PATCH v1 03/42] Fix compile error	[Body]
[RFC PATCH v1 04/42] Fix compile errors	[Body]
[RFC PATCH v1 05/42] Initial support for VM Planes - Add kernel config for CONFIG_VM_PLANES - Parse vm plane config from initrd for plane configuration - Make hypercalls to allocate memory for the vm planes.	[Body]
[RFC PATCH v1 06/42] Use vcpu count from the plane configuration	[Body]
[RFC PATCH v1 07/42] skip processing plane configuration for plane 0 - plane 0 is the boot plane	[Body]
[RFC PATCH v1 08/42] Add plane config param to specify kernel image format	[Body]
[RFC PATCH v1 09/42] Activate the VM Planes through the Hypervisor - Using KVM as the VMM	[Body]
[RFC PATCH v1 10/42] allow the command line to be specified for kernels in other planes	[Body]
[RFC PATCH v1 11/42] Various changes to support VM Planes.	[Body]
[RFC PATCH v1 12/42] Add a Virtualization Based Security (VBS) framework. - Add backends for AMD SEV-SNP, Intel TDX, Arm CCA and KVM Planes. - Support VTL on Hyper-V in addition to Planes on KVM.	[Body]
[RFC PATCH v1 13/42] Add a inter-plane communication mechanism through KVM. - model this to use a single page similar to SEV-SNP	[Body]
[RFC PATCH v1 14/42] KVM: Add per-plane memory attribute support for cross-plane EPT protection	[Body]
[RFC PATCH v1 15/42] KVM: x86: Add KVM_HC_VBS_VTL_CALL hypercall for VBS inter-plane calls	[Body]
[RFC PATCH v1 16/42] vbs: Add HEKI kernel sealing and fix KVM plane memory attribute guards	[Body]
[RFC PATCH v1 17/42] vbs: Add module authentication via VBS/HEKI	[Body]
[RFC PATCH v1 18/42] vbs: Add kexec validation and make module auth non-fatal	[Body]
[RFC PATCH v1 19/42] Merge branch 'master' into vm-planes	[Body]
[RFC PATCH v1 20/42] kvm: x86: fix merged plane API/stat build regressions	[Body]
[RFC PATCH v1 21/42] KVM: x86: exit VM planes and VBS hypercalls to userspace	[Body]
[RFC PATCH v1 22/42] kexec: block legacy kexec_load when VBS is active	[Body]
[RFC PATCH v1 23/42] kvm: x86: fix merged plane API/stat build regressions	[Body]
[RFC PATCH v1 24/42] KVM: planes: expose memory-attribute setting to in-kernel callers	[Body]
[RFC PATCH v1 25/42] vm_planes: drop unused per-plane vcpu_count	[Body]
[RFC PATCH v1 26/42] drivers/virt: add VBS secure-plane park loop	[Body]
[RFC PATCH v1 27/42] KVM: planes: add arch-neutral in-kernel plane switch helper	[Body]
[RFC PATCH v1 28/42] KVM: x86: add VBS VTL call/return and cross-plane set-mem-attrs hypercalls	[Body]
[RFC PATCH v1 29/42] init/vm_planes: set up planes from rootfs_initcall and load ELF payloads	[Body]
[RFC PATCH v1 30/42] security/vbs: run backend probe and HEKI seal at rootfs_initcall	[Body]
[RFC PATCH v1 31/42] security/vbs: pin the VTL call hypercall to CPU0	[Body]
[RFC PATCH v1 32/42] security/vbs: add secure-plane monitor backend	[Body]
[RFC PATCH v1 33/42] drivers/virt: rename VBS park loop to secure_monitor	[Body]
[RFC PATCH v1 34/42] x86/realmode: skip the sub-1M trampoline for the VBS secure plane	[Body]
[RFC PATCH v1 35/42] KVM: x86: deny normal-plane access to secure-plane memory	[Body]
[RFC PATCH v1 36/42] KVM: plane: handle KVM_CHECK_EXTENSION on the plane fd	[Body]
[RFC PATCH v1 37/42] KVM: selftests: run plane tests with a split IRQ chip	[Body]
[RFC PATCH v1 38/42] kvm: x86: drop obsolete kvm_cache_regs.h	[Body]
[RFC PATCH v1 39/42] kvm: arch: finalize plane hooks and kvm_arch_vcpu_create signature	[Body]
[RFC PATCH v1 40/42] kvm: x86: use kvm_vcpu scheduling-state accessors and struct stat fields	[Body]
[RFC PATCH v1 41/42] kvm: x86: finalize per-plane APIC state and CPUID placement	[Body]
[RFC PATCH v1 42/42] kvm: planes: reconcile core plane state, UAPI and hypercall exit	[Body]

Sessions