On Thu, Oct 06, 2022, Sean Christopherson wrote: > + * Forwarding the VM-Exit unconditionally, i.e. without performing the > + * #UD checks (see above), is functionally ok because KVM doesn't allow > + * L1 to run L2 without CR4.VMXE=0, and because KVM never modifies L2's > + * CR0 or CR4, i.e. it's L2's responsibility to emulate #UDs that are Grr, s/L2's/L1's. Fixed the comment locally but didn't commit it before hitting "send".