The backport of cd53023df9 ("x86/msr: Virtualise MSR_SPEC_CTRL.SSBD for guests to use") did not mirror the PV side change into the HVM (VMX- specific) code path.
Signed-off-by: Jan Beulich <jbeul...@suse.com> --- a/xen/arch/x86/hvm/vmx/vmx.c +++ b/xen/arch/x86/hvm/vmx/vmx.c @@ -978,7 +981,8 @@ static int vmx_load_msr(struct vcpu *v, * ignored) when STIBP isn't enumerated in hardware. */ else if ( ctxt->msr[i].val & - ~(SPEC_CTRL_IBRS | SPEC_CTRL_STIBP) ) + ~(SPEC_CTRL_IBRS | SPEC_CTRL_STIBP | + (v->domain->arch.cpuid->feat.ssbd ? SPEC_CTRL_SSBD : 0)) ) err = -ENXIO; else v->arch.spec_ctrl = ctxt->msr[i].val; _______________________________________________ Xen-devel mailing list Xen-devel@lists.xenproject.org https://lists.xenproject.org/mailman/listinfo/xen-devel