According to section "Canonicalization and Consistency Checks" in APM vol 2, the following guest state is illegal: "The MSR or IOIO intercept tables extend to a physical address that is greater than or equal to the maximum supported physical address." Patch# 1: Adds the KVM checks. Patch# 2: Adds a test Patch# 3: Replaces a hard-coded value with an available macro. [PATCH 1/3] KVM: nSVM: Check addresses of MSR and IO bitmap [PATCH 2/3] Test: nSVM: Test MSR and IO bitmap address [PATCH 3/3] Test: SVM: Use ALIGN macro when aligning 'io_bitmap_area' arch/x86/kvm/svm/nested.c | 17 ++++++++++++++--- 1 file changed, 14 insertions(+), 3 deletions(-) Krish Sadhukhan (1): nSVM: Check addresses of MSR and IO bitmap x86/svm.c | 2 +- x86/svm_tests.c | 38 ++++++++++++++++++++++++++++++++++++++ 2 files changed, 39 insertions(+), 1 deletion(-) Krish Sadhukhan (2): nSVM: Test MSR and IO bitmap address SVM: Use ALIGN macro when aligning 'io_bitmap_area'