On 04/26/2018 04:16 PM, Jim Mattson wrote: > On Thu, Apr 26, 2018 at 3:43 PM, Junaid Shahid <junaids@xxxxxxxxxx> wrote: >> When INVPCID is not supported, KVM should clear the INVPCID bit from the >> guest CPUID. > > This seems to be the only guest CPUID bit that's verified in this way. > That seems...odd. Why enforce this one constraint? > Hmm. I wonder if the other bits are not validated intentionally, perhaps to facilitate user-mode emulation? If that is the case, then yes, we don't need to validate the INVPCID bit either.