On Wed, 05 Apr 2023 16:45:54 -0700, Sean Christopherson wrote: > Found-by-inspection (when reviewing Binbin's patch) fixes for incorrect > emulation of faults when KVMintercepts and emulates (sort of) ENCLS. > > Very much compile tested only. Ideally, someone with SGX hardware can > confirm that these patches are correct, e.g. my assessment that KVM needs > to manually check CR0.PG is based purely of SDM pseudocode. > > [...] Applied to kvm-x86 vmx, thanks! [1/2] KVM: VMX: Inject #GP on ENCLS if vCPU has paging disabled (CR0.PG==0) https://github.com/kvm-x86/linux/commit/5e50082c8c21 [2/2] KVM: VMX: Inject #GP, not #UD, if SGX2 ENCLS leafs are unsupported https://github.com/kvm-x86/linux/commit/c3a1e119a343 -- https://github.com/kvm-x86/linux/tree/next https://github.com/kvm-x86/linux/tree/fixes