According to section "Checks on VMX Controls" in Intel SDM vol 3C, the following check needs to be enforced on vmentry of L2 guests: If the "activate VMX-preemption timer" VM-execution control is 0, the the "save VMX-preemption timer value" VM-exit control must also be 0. The first patch adds the required KVM check while the second one adds a KVM unit test. [PATCH 1/2] nVMX x86: Check VMX-preemption timer controls on vmentry of [PATCH 2/2][kvm-unit-test] nVMX x86: Check VMX-preemption timer controls on arch/x86/kvm/vmx.c | 10 ++++++++++ 1 file changed, 10 insertions(+) Krish Sadhukhan (1): nVMX x86: Check VMX-preemption timer controls on vmentry of L2 guests x86/vmx_tests.c | 50 ++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 50 insertions(+) Krish Sadhukhan (1): nVMX x86: Check VMX-preemption timer controls on vmentry of L2 guests