From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from BL0PR03CU003.outbound.protection.outlook.com (mail-eastusazon11012015.outbound.protection.outlook.com [52.101.53.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 769492DCBFD for ; Mon, 26 Jan 2026 21:08:41 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=52.101.53.15 ARC-Seal:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1769461723; cv=fail; b=TPtHtMon7EP+6oTjRyXE6R+GKpgGkjYmaBWBp3nYDvtJCncQc02bBIIzZRntdDkOwSh16I0gShiuGkgEs1Yv55Cq29mi1xXH+Sucwq48t/yatGRMwSYwlRRQQKjLMjYw92aiGk8oVSlsX0XblX6xrAJfUBRosXVT4rc+LWr1THM= ARC-Message-Signature:i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1769461723; c=relaxed/simple; bh=XXGKs/ezZxsMREEfgPH08UVTNVCXqIhhnDCxy9DqR/w=; h=Message-ID:Date:Cc:Subject:To:References:From:In-Reply-To: Content-Type:MIME-Version; b=ctVKgYoeXDqKSneWmosY978bBeg9flmurPg34GNvKKTzR/SK/5NISybALqrWv9zNaJ15UCn74rkBp5FTEmPWoukIzpDoPTzQkB5UyTaiw6FAhTtgW1wCcEdpPA2ujFJTrFYqh0O3QDuM5Cr0colt5fRGU1F4m3hB5RMqhBMCh6s= ARC-Authentication-Results:i=2; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=citrix.com; spf=pass smtp.mailfrom=citrix.com; dkim=pass (1024-bit key) header.d=citrix.com header.i=@citrix.com header.b=NsS9t5mR; arc=fail smtp.client-ip=52.101.53.15 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=citrix.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=citrix.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=citrix.com header.i=@citrix.com header.b="NsS9t5mR" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=A0a9po22waHh66NnsB4oxzc8s3bl5vwXT+FqgQSrP+NgINcnhc3iCkxEDVPvm0SCoExGWDvAysFsdKnjy4ZrM+GYeL+b4uLbMjVxAJcJ9uwM5H/ZdNMJk215Aq/hL6iRazl1+7oWJCg22DjZR5IUYFlVlBZFG9F5mpmthG3NyuwxMc1hEWBBhw7I1WJb9ggXMrE5NSJ5BDYmQ5DSJ3jwgJtGInvbyG5IOlocIzGsNTvBT2KKLiE9FBhlgRdKYkhKEsMxqMO16LuDL2YQjgpQtdCc1o0kpgVrueY45PffH/VSqytigGalZRtBWL3u8y1vIuWhmgWFxcTHFU7VSmWESQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=8cKFKNQnxrxxhmgP8uYGKlK6pmLuBXpibt61C4WR4bY=; b=YLSgU3YJo3R324cwi3Xtuy4CW6rAdKG6Te6An0mmg0lO4CDFbeA8cK3MZNrUkYe2F6PfsEbOTko7yFC2D8YKsI08FExQhgJaPyQp4j4IwBaTeMnR+GbPcaoy3zMH4Z6yHDBEcR6Y0b/gbF5Ewjl6GECdVnWa039mjhnMYx9KBsV4HvO7axgJqCpf7Oa/nP3hsTUAAP5eV+AO5klRtH45uGMYlvY3XiSh1MFNRKrAdiNVOxWSI9TIsQbttyXJ1sypmQ5vTOYjKz8e1nUfDl9Gd5UcX4ntD7teQ+ZWsxiwbUVsVIxjr/MLwN/eFQP6cW3jzEqNZ215hk5yKutIj18Wig== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=citrix.com; dmarc=pass action=none header.from=citrix.com; dkim=pass header.d=citrix.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=citrix.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8cKFKNQnxrxxhmgP8uYGKlK6pmLuBXpibt61C4WR4bY=; b=NsS9t5mRyHl5p+2DnneCqcgzMZ7Zs0lmuY9ndVivrnJKL+HwKf0qbTCJ9swsa81/pYRxT8pB8HrKx+pOtr+vKbj1lzAjxZNOQdBm3o246/pTQwAWzc/BO+PwEON0hF0bc9GmooCWhO53OVmzqSwHNEwH0daASVkY01JCCX4l5eg= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=citrix.com; Received: from CH8PR03MB8275.namprd03.prod.outlook.com (2603:10b6:610:2b9::7) by BLAPR03MB5554.namprd03.prod.outlook.com (2603:10b6:208:290::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9542.15; Mon, 26 Jan 2026 21:08:38 +0000 Received: from CH8PR03MB8275.namprd03.prod.outlook.com ([fe80::a70d:dc32:bba8:ce37]) by CH8PR03MB8275.namprd03.prod.outlook.com ([fe80::a70d:dc32:bba8:ce37%4]) with mapi id 15.20.9542.015; Mon, 26 Jan 2026 21:08:38 +0000 Message-ID: Date: Mon, 26 Jan 2026 21:08:34 +0000 User-Agent: Mozilla Thunderbird Cc: Andrew Cooper , Ryusuke Konishi , Alexander Potapenko , Marco Elver , Dmitry Vyukov , Thomas Gleixner , Ingo Molnar , Borislav Petkov , Dave Hansen , x86@kernel.org, "H. Peter Anvin" , Andrew Morton , Jann Horn , kasan-dev@googlegroups.com Subject: Re: [PATCH] x86/kfence: Fix booting on 32bit non-PAE systems To: LKML References: <20260126210612.2095681-1-andrew.cooper3@citrix.com> Content-Language: en-GB From: Andrew Cooper In-Reply-To: <20260126210612.2095681-1-andrew.cooper3@citrix.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-ClientProxiedBy: LO2P265CA0287.GBRP265.PROD.OUTLOOK.COM (2603:10a6:600:a1::35) To CH8PR03MB8275.namprd03.prod.outlook.com (2603:10b6:610:2b9::7) Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CH8PR03MB8275:EE_|BLAPR03MB5554:EE_ X-MS-Office365-Filtering-Correlation-Id: 367b4649-c931-4853-f054-08de5d1f139f X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|366016|376014|7416014|7053199007; X-Microsoft-Antispam-Message-Info: =?utf-8?B?TGRUdFdHTGhFdFRyKytrdUhVcjg5SU42VlhCejZraEdTNTB5SEo3NEtrY0Ni?= =?utf-8?B?MGFibDJuYXFuS053UUVPayt6NXJvMURMVnZhL3ZzMDNXamEzQzZZdnRaRFUy?= =?utf-8?B?OW9Wd1J4UGJMYzNyOU1PTEczdDlZVGphNmJ3ZTFkenRveTB5UFJBUkZGWDJP?= =?utf-8?B?KzRBS0lqN0xvcGdNY1NlWW5DcU41ZHoweTNraDNDdVVCNGJxUnRuK09pQTdi?= =?utf-8?B?MXB3TTlzay9pcW9ZZmJRcElMY2Q4R0xWREUwRWVEZmZrMVc2ZkhiOGpJbkMr?= =?utf-8?B?cVZxSXdMVkRvMnh4OTBMNWpZQk94M0lzRStCTVA1R3E2a0RoaWxrWTdBeUFv?= =?utf-8?B?cnUxSDVnKy9JZFk3S1JYYnk4OENJYWFGNWRhM1lYd1N2dEFoSjRjaGdBck9o?= =?utf-8?B?UmVTWmFDS0kwbEVyQmJ6OW1OR01YQ2x3aFA2enpJUi9iSzI0b1N2KzhpZmJi?= =?utf-8?B?R2cxeWZaRmU0ZG9sTi9zYWNTYlhjRkcyV2Q0ZmJpNHhOWFZxYWg3bjRieTdj?= =?utf-8?B?TzRVUjlpMmxtMStsRFduSWMvTmg4bkN3aFNOUUwrOHNmYUpUczNIUWV2VVN0?= =?utf-8?B?dEpGOTZURkF1Z2grYUZoL3IxYklwU3QwNmZlVlljWmpDV0xIelhvbTRmRXZD?= =?utf-8?B?eXRzYkplQ0d4S0YwN1F6MXdlMUhiOGE5OHdwVFRFWFpHemI5MG4zWWdXL3RX?= =?utf-8?B?SHJ5Sy84QlJKaEIwUVZMdEpRTmw0SHpTSk9RUUFBYWs4ZjBRaEJJOVFFS1c1?= =?utf-8?B?dmNLdFFtTGZlMGJlK3NBV2FDZ1NobS84NU5LalVQeUUyaUNERlJSbldCZ1VC?= =?utf-8?B?TzVaY0FPVE5nYzB4TitnZkVhT3NCaWFKV0hZV2VKbmNKUFhOM3dZL0c1WFpq?= =?utf-8?B?WVJyNGw5bTNMMWd0Sy9QMDZ2a3FtTUQrREhZYU5semhBN3RYZUpxK3RZNXU4?= =?utf-8?B?MnRESG9NVlZoU2laM1ptUUNieWpOVXF0L1JzZWZxTldtcUwvUzlSZUQyUTg0?= =?utf-8?B?Y2E1QTU3Qy9sSnQzRWR3VnZXOXk1cDZVVjB2S2FiTE81S00xdUVRQkhaeFZN?= =?utf-8?B?T2dHK2ZUV21lNWpRM3lVeWdJV0RQbks0TnBxR2dBZXl2MTFVZWVJQUY3ajNn?= =?utf-8?B?eVlDcXllZFJQVEM5K3VQZVlYa2lWY1doNEg3TVVoTURaRFRNdWdLR3UwR2xq?= =?utf-8?B?UXYzclBDRW5xOUhwUytueEdzb1hZOG1tczhUSHpOV202L1NOQ2xydFIzT3pE?= =?utf-8?B?d0tqRmo4SzB1WkYzM29NQkxqOEt3ZE5KY3dIRWFRbWZKTWVLMUlsRlVoVkpk?= =?utf-8?B?Mk5BM3dYdHpOaUw4RWh0a0V1WjFxemQ5bmtXWkdOeGtjMzFVUmhzaENNUURG?= =?utf-8?B?alcxcHBrZGdVMjlUR2FQdUxzaEJNcTNsSWJBOFJwUGpVeVhhTGUzdWMySFp6?= =?utf-8?B?Y2VQbis1eXlNVTJoQ1lSWklrU1hicnMvWXoyeWhFN2xSbm9tRkFiZmtuTzIz?= =?utf-8?B?R1FZL0V2bGNoNkRSQ1ZnVmkrVFFTTklCenBsa3VmOHdDRS9PTE5tY29kWXQx?= =?utf-8?B?NDZCN1d3YzVwLy9qQlNjSk0waUN6Unc0dEJXUVYwcmJ6aWxoQ0xOQW1EQmwr?= =?utf-8?B?bTBqZ3UrRTl0aUhleG1DOFE3L1RocHlzV1RwK2RkeG5KMHBtR1pTQ3B4UUVq?= =?utf-8?B?VGYyMHZjdUE4R3FvbHkwNEpkQyt0cWFIOFRManlEYnVpeXhuR0dqVG83aXMw?= =?utf-8?B?TGU4a2hDcFpkalh3a205SngrQXAzY2k4YzE5eXJuN3ZZK0Q5bDNRSTQzVDFG?= =?utf-8?B?azU2a005aUUzamVNd0hyVUFFZ2FsemcyTlBCbjJQM01RTGhudnIvZzB4SURh?= =?utf-8?B?empzV1ZBNndiUTJjM0xQNEFRNkJ0WVlhWXNOUVNFa09WMmZBYTJoRm1heUJa?= =?utf-8?B?V2NYZGZVSzluTDhxRUNqNG1WbktXZjBZTWhCUnhQSE92bXdDVktncGc2Yi9s?= =?utf-8?B?NFJ3bXlaMDJCSk96MlJoVUZPcWFwQlhGNEpvaElBdklJUHRGVmJlNFVPc1Vu?= =?utf-8?B?LzVCVnlhUk11R1dvS3k1Q3kxaFNTbFJadHdnRlNyRnplMWZRdkVhWnR6MnV6?= =?utf-8?Q?ikl4=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CH8PR03MB8275.namprd03.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(376014)(7416014)(7053199007);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?ZFdrMUlwa2h0MFBkNTFPSkdUMWsxMDlHM2NJUEhnMG05MkRmUzRYb2liL1NI?= =?utf-8?B?UTBsRys5Wk53ZmcySmV6aFpYaUhpeStlcVpIVWw4d29oNW5zTk45andyd3dK?= =?utf-8?B?emxPRlZXUllNVWNldGtOZk1jdFZWaWlLUnpGQWs1emZIaFkvNEpZKzg0SzlS?= =?utf-8?B?a2k4SmZtaGw0L0ZzTFZQTU1FY1pTL3hNVzU2bytINWZ0TXpObURWQzdWcVhj?= =?utf-8?B?OVlUSnZ1MHJXYmdMMWFiYjVET0FwdVNQaHlKRXZjZGhNbXFBbExvNDFzUXhK?= =?utf-8?B?RDMvdzB4bUFsYjgrOTBvKzNzOUtibkZBM0IzcHhtUUFaL01oVTZpT0xOY3pQ?= =?utf-8?B?RXNheVBVS2UxZmx1SkdueGFBYjMxSVlhNm1pQWZYM0Q2WUdWYkNFVDU1dXNC?= =?utf-8?B?TVd2eHlPaGRKMk5vTjJ6ei8rejF0NjRZOWNuVXlUcjJQYlM3M1hrN0FuSjFn?= =?utf-8?B?UGdUWTVTYUFpQmo5WGxNNTFrRWxHa0xJOGJVZDl1MDdMb243VjhhUzl2VUVS?= =?utf-8?B?RWlqcFNPTCtHWHVlZmdNQWpKR2VWVWR6bWNKckU2bVQ3N3FIZXoyTy81MGZ5?= =?utf-8?B?VEU3aGliY29XdTJ1S0pHMU9yS1lsYWpiNmlVQTdqUWZoMDhBTkJ0eG1sL0kx?= =?utf-8?B?OGlrVmxpWGdHTzl3aEhsTkFBVy9QVSsreFJKR0daMFh2b2U0dEsrSW5hUVRl?= =?utf-8?B?d0pkTER6ekJpWFA5WEJ2V0pLU2RVMDRnSVY0M3VzdjV6SjM5cjJmbG1ZUDAx?= =?utf-8?B?OTh5MENKWlJidXdVcFozSjNER0I5aVQwd2VoMnpXK3d6UEFLYW82WXIwWFZR?= =?utf-8?B?OCt6WisyNE50dmNCdHZiQ3JmeFMwZTVaS21meW43UTNnU0NBb0d3Z2laWm1q?= =?utf-8?B?YmdBQ0lPR3F2T3hYYWUwNEZUWHhOYkY4QjlpQ2R2T3FZTjZMWE1Eb2dnY0cx?= =?utf-8?B?RGptblhTWXJJQ1R6UDltNm5ubEltV3I0Sm96cXdVQlk5SWljOTdDd0FuejRN?= =?utf-8?B?MW5OZHExa3QyWVpmV1VXZXdoeGxSQTNIUkJpVnZEOTVRemlqY2VSeXFudDV6?= =?utf-8?B?aVJmWVFMcjRYSkQ2ZkFmMW1lbVZpV1VDMWtqdnRqOHVkeERGaWhIUjJ0eGlL?= =?utf-8?B?dlUwM3RFV29HMHZHaS9BZGRFM3ZtZ3RNYVpxMXZ1aVZaSzBFa0wxTjhQeHor?= =?utf-8?B?QUgxSSt1TW1JUGRYdUczSE1kM25KY3dqMnV3ZlhDaHBWZXpobXVweUt3NEEy?= =?utf-8?B?VDVyQnp6MXBpaEp5ZHpkUlMvbjhCV1R2VGJXMG0rU3pydWR4T3NBRXlwM0Zs?= =?utf-8?B?dzJySmZ6UkVKbnIzYXd3bDBaTUdMaHdaSHBwK3NyTVRnT2ZHdmg5YmttN1J6?= =?utf-8?B?VCtLb3JZeEw1Q2M2VHl2UGpwN3RXNG5mWVVDUUk4RVBuZENRYWxwejVQcDVL?= =?utf-8?B?ZmFGS1Y3enE0Vng4MThuT0xWYzc0aVRCS3pOMk96OGhTbGVZTUxkY1ZXYmts?= =?utf-8?B?b3g2MGd3WmhRdGRjUHVzbG15Q2NkZ0tmYjhpaEdWSWtnS3BXOG5mYTJxKy9D?= =?utf-8?B?WkxjWkhFdDg0aFRaM01SQ3ltSEx2SkE0V2M3NDlGWi9DMVgybDMxdVE4dDJz?= =?utf-8?B?dDZCdHdVMmZWemFnNEE2dXB6LzRVUy9pK2lVbGxMTktZVjRRdnJNNXd6bHh2?= =?utf-8?B?YStwT2ExaWJwUDQ0UkpiaWthM2FlRmJYMnVBc2tpZnFkUitmSGMvdVU1ZjZz?= =?utf-8?B?SkhKdzhPT3gzU2tWSmNxNUViUDZGaDNOWnBRK2VMWFpzeDRMZXpjb0hzT3Fo?= =?utf-8?B?c0NzMjR2ZnFLbVYrMEdvRnMzNTRjTWEzQ2FRS0RxK1B1bjJOM2N0ZW53SjZW?= =?utf-8?B?VlpZVFV0TmtpZVRnNTBINUs0YnVTQUlMMmhMQXhEeFZzQ21oYnpzWnVkcThp?= =?utf-8?B?VUthWUxqa0plQ3lrWTRvejNKM3UyeSt6Q0FMeU5KK3ZURFdnOFluUEd3TjVh?= =?utf-8?B?Szg3VFNXU3ZjcGRwOExhL1RrOGxoNkl4WTlKNmZKTUQ5bHhpdzRDRis1OGNj?= =?utf-8?B?b0hWNlVtbUIyNlJTY3V0aHczaldlNzJzakxNdEdLTVlJSDhKNFB4YVpXZ0Zq?= =?utf-8?B?MW51WTlWNzhnREphYW9iOFBWRXIxVGpDYjU0cUZtM1lxL25mNEhXcE9ITGJv?= =?utf-8?B?Z0RVRGNSL2VDWDF6VXgvcXNid0Z3L0lubEVtTFF2Q3d1R3VvWmIzcVJCbHJH?= =?utf-8?B?UnJvUXBmRTgwVFJYdUFURUNab3ovK2dIcCtMUFZGUUpvbXp6K2toeUR5UDZU?= =?utf-8?B?eUorcUNQRUEwY0NENEtLYlpDRUQ4c1oxN3kya1pxQ3dWQlB5TFl4QT09?= X-OriginatorOrg: citrix.com X-MS-Exchange-CrossTenant-Network-Message-Id: 367b4649-c931-4853-f054-08de5d1f139f X-MS-Exchange-CrossTenant-AuthSource: CH8PR03MB8275.namprd03.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 26 Jan 2026 21:08:38.8337 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 335836de-42ef-43a2-b145-348c2ee9ca5b X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: h0hW0NxChWZY4D+YiAXigQ/dlpOrLi5JrsV6XtiNWmYqV4Xl6nGtL/9t3pBjAWixX/TH/GZ0uiLp5Ff0UP8dX0lhIitjg6nxuAbmHJvH6Bw= X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLAPR03MB5554 On 26/01/2026 9:06 pm, Andrew Cooper wrote: > The original patch inverted the PTE unconditionally to avoid > L1TF-vulnerable PTEs, but Linux doesn't make this adjustment in 2-level > paging. > > Adjust the logic to use the flip_protnone_guard() helper, which is a nop on > 2-level paging but inverts the address bits in all other paging modes. > > This doesn't matter for the Xen aspect of the original change. Linux no > longer supports running 32bit PV under Xen, and Xen doesn't support running > any 32bit PV guests without using PAE paging. > > Fixes: b505f1944535 ("x86/kfence: avoid writing L1TF-vulnerable PTEs") > Reported-by: Ryusuke Konishi > Closes: https://lore.kernel.org/lkml/CAKFNMokwjw68ubYQM9WkzOuH51wLznHpEOMSqtMoV1Rn9JV_gw@mail.gmail.com/ > Signed-off-by: Andrew Cooper > CC: Ryusuke Konishi > CC: Alexander Potapenko > CC: Marco Elver > CC: Dmitry Vyukov > CC: Thomas Gleixner > CC: Ingo Molnar > CC: Borislav Petkov > CC: Dave Hansen > CC: x86@kernel.org > CC: "H. Peter Anvin" > CC: Andrew Morton > CC: Jann Horn > CC: kasan-dev@googlegroups.com > CC: linux-kernel@vger.kernel.org > --- > arch/x86/include/asm/kfence.h | 9 +++++---- > 1 file changed, 5 insertions(+), 4 deletions(-) > > diff --git a/arch/x86/include/asm/kfence.h b/arch/x86/include/asm/kfence.h > index acf9ffa1a171..40cf6a5d781d 100644 > --- a/arch/x86/include/asm/kfence.h > +++ b/arch/x86/include/asm/kfence.h > @@ -42,7 +42,7 @@ static inline bool kfence_protect_page(unsigned long addr, bool protect) > { > unsigned int level; > pte_t *pte = lookup_address(addr, &level); > - pteval_t val; > + pteval_t val, new; > > if (WARN_ON(!pte || level != PG_LEVEL_4K)) > return false; > @@ -57,11 +57,12 @@ static inline bool kfence_protect_page(unsigned long addr, bool protect) > return true; > > /* > - * Otherwise, invert the entire PTE. This avoids writing out an > - * L1TF-vulnerable PTE (not present, without the high address bits > + * Otherwise, flip the Present bit, taking care to avoid writing an > + * L1TF-vulenrable PTE (not present, without the high address bits > * set). > */ > - set_pte(pte, __pte(~val)); > + new = val ^ _PAGE_PRESENT; > + set_pte(pte, __pte(flip_protnone_guard(val, new, PTE_PFN_MASK))); > > /* > * If the page was protected (non-present) and we're making it > > base-commit: fcb70a56f4d81450114034b2c61f48ce7444a0e2 And I apparently can't spell.  I'll do a v2 immediately, seeing as this is somewhat urgent. ~Andrew