On Mon, Jun 17, 2019 at 12:26:01AM +0200, Thomas Gleixner wrote: > Nah. The straight forward approach is to do right when the secondary CPU > comes into life, before it does any cr4 write (except for the code in > entry_64.S), something like the below.
Okay, will do; thanks! :) I'll respin things and get it tested. -- Kees Cook