[PATCH v23 00/14] KVM: arm64: CCA: Add basic plumbing for Realms

[Suzuki K Poulose]

On 09/10/2026 14:28, Marc Zyngier wrote:
> On Wed, 07 Oct 2026 08:35:23 +0100, Suzuki K Poulose wrote:
>> This is a trimmed down and updated version of the v22 of Arm CCA basic
>> plumbing series [0]. I have dropped the CCA specific bits for the sake keeping
>> them separate. This series now only contains the framework for handling
>> different VM types and lay down the path for adding Realm as one of the
>> protected VMs. The full support for running Realms under KVM is available as
>> an integration branch at [1].
>>
>> [...]
> 
> Applied to next, thanks!
> 
> [01/14] KVM: arm64: protected VM: Handle user writes to CNTVCT_EL0/CNTPCT_EL0
>          commit: 3d736a339e9cbeec3841da1a821f56fb3230fd68
> [03/14] KVM: arm64: Include kvm_emulate.h in kvm/arm_psci.h
>          commit: 22adb9c3543cc702516c18f0a28e3a8dfcdbeecc
> [04/14] KVM: arm64: Avoid including linux/kvm_host.h in kvm_pgtable.h
>          commit: 0c4063f89bfdf204112651f45620ef0c5a691e6b
> [05/14] KVM: arm64: Track the type of VM in kvm_arch
>          commit: 762ad274c03a13686192d75ef9a354b96114b503
> [06/14] KVM: arm64: Don't call vcpu_set_pauth_traps for pKVM host
>          commit: 42a4026b435e49af4d5eaae58afe7103ca740c30
> [07/14] KVM: arm64: Refactor the vcpu_load to allow for VM specific callbacks
>          commit: 8252f74f9188b9148ec93438e53b8e1b865ffb7b
> [08/14] KVM: arm64: Add vcpu load/put call backs for flavors
>          commit: 0cb16544ccaceba4c5e8beb2e8ae896278dcf018
> [09/14] KVM: arm64: Consolidate stage2 unmap range into kvm_stage2_unmap_range
>          commit: fb3926af9d0d5e2e2f58a1f4b2252f529fbe23bf
> [10/14] KVM: arm64: Add VM specific callback for S2 MMU operations
>          commit: 68933203edddc092b30dd1039167b3262a40a326
> [11/14] KVM: arm64: Use a local kvm pointer in kvm_handle_guest_abort()
>          commit: 4ee1b583589781bfd47b28da3ce216b2fb51dac5
> [12/14] KVM: arm64: Abstract out memory abort handling
>          commit: b44a8c32f0116aba0a934c3068628bacda3cd3a3
> [13/14] KVM: arm64: Mandate VGIC v3 for pKVM VMs and Realms
>          commit: 37d7ea3f81bbe61f1e895b6c87decadbfe8799eb
> [14/14] KVM: arm64: Prevent unsupported vcpu features for VM types
>          commit: a467f39afc2a149f9f5efbb7238fb531ade8a86e
> 
> FWIW: I've dropped patch #2, which was a duplicate of an equivalent pKVM
> change, kept patch #13 (we can simplify things down the line), and hacked
> the patch #14 merge so that we don't have to describe things twice.
> 
> Of course, mmu.c is where the crap happens, so anyone with any interest
> in this stuff being halfway sane, please review the conflict resolution.

Thanks Marc ! Apart from what Fuad reported, the plumbing bits look good
to me.

Cheers
Suzuki