On Thu, Sep 29, 2022, Paolo Bonzini wrote: > The two Kconfig entries for SMM and XEN are more for things that you want to > remove to reduce attack surface than for testing. Yep, we want to disable SMM to reduce KVM's attack/bug surface. Any performance benefits are bonus side effects.