On 06/12/2018 07:39 AM, Kirill A. Shutemov wrote: > Pages encrypted with different encryption keys are not subject to KSM > merge. Otherwise it would cross security boundary. This needs a much stronger explanation. Which KeyID would be used for access in the new direct mappings? What actually happens without this patch in place?