On 20/08/2015 21:36, Eugene Korenevsky wrote: > Prepare for subsequent changes. Extract calls for segment checking in protected > and 64-bit mode. This should be done to avoid overbloating of > get_vmx_mem_address() function, even if kvm_queue_exception_e() is called > twice. The idea behind the patch is okay, but all VMX root-mode instructions require CR0.PE = 1, so vmx_protmode_seg_check must always be run. Please adjust nested_vmx_check_permission to check CR0.PE as well. Paolo -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html