[PATCH v2] KVM: arm64: Sync SCTLR_EL1 when injecting an exception into a pVM

[Oliver Upton]

On Tue, 21 Jul 2026 17:16:24 +0100, Fuad Tabba wrote:
> When pKVM injects a synchronous exception into a protected guest,
> enter_exception64() reads SCTLR_EL1 to set the new PSTATE's PAN and
> SSBS bits. pKVM refreshes VBAR_EL1 from the live value before injecting
> but not SCTLR_EL1, which is untrapped for protected guests, so a guest
> that updates it and then traps takes the exception with stale PAN/SSBS.
> 
> Sync SCTLR_EL1 alongside VBAR_EL1.
> 
> [...]

Applied to next, thanks!

[1/1] KVM: arm64: Sync SCTLR_EL1 when injecting an exception into a pVM
      https://git.kernel.org/kvmarm/kvmarm/c/596289fe4836

--
Best,
Oliver