2017-05-23 11:52-0700, Jim Mattson: > The MSR permission bitmaps are shared by all VMs. However, some VMs > may not be configured to support MPX, even when the host does. If the > host supports VMX and the guest does not, we should intercept accesses > to the BNDCFGS MSR, so that we can synthesize a #GP > fault. Furthermore, if the host does not support MPX and the > "ignore_msrs" kvm kernel parameter is set, then we should intercept > accesses to the BNDCFGS MSR, so that we can skip over the rdmsr/wrmsr > without raising a #GP fault. > > Fixes: da8999d31818fdc8 ("KVM: x86: Intel MPX vmx and msr handle") > Signed-off-by: Jim Mattson <jmattson@xxxxxxxxxx> > --- IIUC, we don't even need faster accesses as BNDCFGS MSR should usually be written once per boot and never read, Reviewed-by: Radim Krčmář <rkrcmar@xxxxxxxxxx>