Fix bug of not updating nested MSRs regarding APICv, when refreshing apicv exec ctrl. Before this commit, enabling Hyper-V SynIC would disable APICv controls in VMCS but still expose APICv controls to nested guest. Signed-off-by: Arbel Moshe <arbel.moshe@xxxxxxxxxx> Reviewed-by: Liran Alon <liran.alon@xxxxxxxxxx> Reviewed-by: Krish Sadhukhan <krish.sadhukhan@xxxxxxxxxx> Signed-off-by: Krish Sadhukhan <krish.sadhukhan@xxxxxxxxxx> --- arch/x86/kvm/vmx.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/arch/x86/kvm/vmx.c b/arch/x86/kvm/vmx.c index 84ccd3b2762c..0450fbdb97be 100644 --- a/arch/x86/kvm/vmx.c +++ b/arch/x86/kvm/vmx.c @@ -5253,6 +5253,8 @@ static void vmx_refresh_apicv_exec_ctrl(struct kvm_vcpu *vcpu) if (cpu_has_vmx_msr_bitmap()) vmx_set_msr_bitmap(vcpu); + + nested_vmx_setup_ctls_msrs(vmx); } static u32 vmx_exec_control(struct vcpu_vmx *vmx) -- 2.14.1
