Hi Greg, The following two patches are upstream fix for CVE-2014-3690 and CVE-2014-3646, now backport to 3.10. BR Wang Kai --- Andy Lutomirski (1): x86,kvm,vmx: Preserve CR4 across VM entry Petr Matousek (1): kvm: vmx: handle invvpid vm exit gracefully arch/x86/include/uapi/asm/vmx.h | 2 ++ arch/x86/kvm/vmx.c | 25 ++++++++++++++++++++++--- 2 files changed, 24 insertions(+), 3 deletions(-) -- 1.7.9.5 -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html