On Tue, May 26, 2020 at 04:14:25PM -0700, Andi Kleen wrote: > > And if this is going to be more permanent, we can separate the mask > > (untested): > > The FSGSBASE one should not be permanent, it will be replaced > with the full FSGSBASE patches that set that bit correctly. Well, even with full FSGSBASE patches on, that CR4 bit should never get changed after boot.