CVSROOT:        /cvs
Module name:    src
Changes by:     [email protected]    2026/08/31 19:13:27

Modified files:
        sys/arch/amd64/amd64: vmm_machdep.c 
        sys/arch/amd64/include: specialreg.h 

Log message:
Save CET state on Intel vmm(4) hosts before vm entry.

On Intel hosts with CET support, vmm must set the host CET related
state in the VMCS so VMX will restore it on vm exit. vmm was not
setting this before vm entry resulting in VMX disabling CET on host
cpus when returning to the kernel.

Additionally, vmm should explicitly zero the initial guest state
related to CET and supervisor shadow stacks instead of relying on
the memory backing the VMCS to have been zeroed.

ok mlarkin@

Reply via email to