@@ -1944,8 +1944,10 @@ static inline bool is_vmx_feature_control_msr_valid(struct vcpu_vmx *vmx,
}
#define VIRTUAL_ENUMERATION_VALID_BITS VIRT_ENUM_MITIGATION_CTRL_SUPPORT
-#define MITI_ENUM_VALID_BITS MITI_ENUM_RETPOLINE_S_SUPPORT
-#define MITI_CTRL_VALID_BITS MITI_CTRL_RETPOLINE_S_USED
+#define MITI_ENUM_VALID_BITS (MITI_ENUM_RETPOLINE_S_SUPPORT | \
+ MITI_ENUM_BHB_CLEAR_SEQ_S_SUPPORT)
+#define MITI_CTRL_VALID_BITS (MITI_CTRL_RETPOLINE_S_USED | \
+ MITI_CTRL_BHB_CLEAR_SEQ_S_USED)
static int vmx_get_msr_feature(struct kvm_msr_entry *msr)
{
@@ -2496,6 +2498,11 @@ static int vmx_set_msr(struct kvm_vcpu *vcpu, struct msr_data *msr_info)
arch_msr & ARCH_CAP_RRSBA)
spec_ctrl_mask |= SPEC_CTRL_RRSBA_DIS_S;
+ if (data & MITI_CTRL_BHB_CLEAR_SEQ_S_USED &&
+ kvm_cpu_cap_has(X86_FEATURE_BHI_CTRL) &&
+ !(arch_msr & ARCH_CAP_BHI_NO))
+ spec_ctrl_mask |= SPEC_CTRL_BHI_DIS_S;
+
/*
* Intercept IA32_SPEC_CTRL to disallow guest from changing
* certain bits.