[PATCH v2] KVM: arm64: Work around C1-Pro erratum 4193714 for protected guests

[Marc Zyngier]

On Tue, 05 May 2026 17:52:03 +0100, Catalin Marinas wrote:
> C1-Pro cores with SME have an erratum where TLBI+DSB does not complete
> all outstanding SME accesses. Instead a DSB needs to be executed on the
> affected CPUs. The implication is that pages cannot be unmapped from the
> host Stage 2 and then provided to a protected guest or to the
> hypervisor. Host SME accesses may still complete after this point.
> 
> This erratum breaks pKVM's guarantees, and the workaround is hard to
> implement as EL2 and EL1 share a security state meaning EL1 can mask
> IPIs sent by EL2, leading to interrupt blackouts.
> 
> [...]

Applied to fixes, thanks!

[1/1] KVM: arm64: Work around C1-Pro erratum 4193714 for protected guests
      commit: 1f7305d87aa23db2579df222eba504a333c2c978

Cheers,

	M.
-- 
Without deviation from the norm, progress is not possible.