Il 22/08/2014 01:30, Wanpeng Li ha scritto: > Maybe I misunderstand your comments "On real hardware you could point > the virtual-APIC page to an invalid address." > http://lists.openwall.net/linux-kernel/2014/08/07/344 > That referred to an address that doesn't correspond to RAM. You can use addresses like these in a real processor. But the manual says that "if the “use TPR shadow” VM-execution control is 1, VM entry ensures that the virtual-APIC address is 4-KByte aligned" (24.6.8 Controls For APIC Virtualization). This is the check that is missing. Paolo -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html