| ▲ | br0ceph a day ago | |
"If you operate an x86 KVM host that accepts multi-tenant guests and supports nested virtualization, or use an instance on top of one" does this mean that you must have nested virtualization enabled to br vulnerable. does disabling this feature in the host os or bios, make you immune to this bug? | ||
| ▲ | kurisufag a day ago | parent | next [-] | |
Nested virtualization prompts the use of shadow paging (where the bug is), is my understanding, where non-nested cases use hardware accelerated translation instead. | ||
| ▲ | bonzini 20 hours ago | parent | prev [-] | |
Yes you can disable it via kernel module parameters kvm_intel.nested=0 or kvm_amd.nested=0. | ||