It's been a while since I sent out v2. This patch-series tests the Selector and Base Address fields of the Guest Segement register according to section "Checks on Guest Segment Registers" in SDM vol 3C. "Unrestricted guest" VM-execution control is a condition in testing some parts of the Guest Segement registers. v2 -> v3 1. Patch# 1 has been enhanced to check the "unrestricted VM-execution control" of the nested VMCS, along with the "enabled_unrestricted_guest" global variable, in some of the code paths where the VM-execution control from both vmcs01 and vmcs02 needs to be considered. 2. Patch# 3 is new. It adds a test for VMENTRY of an unrestricted guest in unpaged protected mode. [PATCH 1/3 v3] KVM: nVMX: KVM needs to unset "unrestricted guest" [PATCH 2/3 v3] nVMX: Test Selector and Base Address fields of Guest Segment [PATCH 3/3 v3] nVMX: Test vmentry of unrestricted (unpaged protected) nested arch/x86/kvm/vmx/nested.c | 3 +++ arch/x86/kvm/vmx/vmx.c | 17 +++++++++-------- arch/x86/kvm/vmx/vmx.h | 7 +++++++ 3 files changed, 19 insertions(+), 8 deletions(-) Krish Sadhukhan (1): KVM: nVMX: KVM needs to unset "unrestricted guest" VM-execution control in vmcs02 if vmcs12 doesn't set it lib/x86/processor.h | 1 + x86/vmx_tests.c | 200 ++++++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 201 insertions(+) Krish Sadhukhan (1): nVMX: Test Selector and Base Address fields of Guest Segment Registers on vmentry of nested guests x86/vmx.c | 2 +- x86/vmx.h | 1 + x86/vmx_tests.c | 48 ++++++++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 50 insertions(+), 1 deletion(-) Krish Sadhukhan (1): nVMX: Test vmentry of unrestricted (unpaged protected) nested guest