By using this site, you agree to the Privacy Policy and Terms of Use.
Accept
World of SoftwareWorld of SoftwareWorld of Software
  • News
  • Software
  • Mobile
  • Computing
  • Gaming
  • Videos
  • More
    • Gadget
    • Web Stories
    • Trending
    • Press Release
Search
  • Privacy
  • Terms
  • Advertise
  • Contact
Copyright © All Rights Reserved. World of Software.
Reading: Intel TDX Support For KVM Finally Expected To Debut In Mainline Linux 6.16
Share
Sign In
Notification Show More
Font ResizerAa
World of SoftwareWorld of Software
Font ResizerAa
  • Software
  • Mobile
  • Computing
  • Gadget
  • Gaming
  • Videos
Search
  • News
  • Software
  • Mobile
  • Computing
  • Gaming
  • Videos
  • More
    • Gadget
    • Web Stories
    • Trending
    • Press Release
Have an existing account? Sign In
Follow US
  • Privacy
  • Terms
  • Advertise
  • Contact
Copyright © All Rights Reserved. World of Software.
World of Software > Computing > Intel TDX Support For KVM Finally Expected To Debut In Mainline Linux 6.16
Computing

Intel TDX Support For KVM Finally Expected To Debut In Mainline Linux 6.16

News Room
Last updated: 2025/04/13 at 6:36 AM
News Room Published 13 April 2025
Share
SHARE

While the Linux 6.15 merge window ended just one week ago and there is a month and a half until it will debut as stable, a notable feature has already been queued into a “next” branch for the follow-on Linux 6.16 cycle. For those making use of modern Intel Xeon processors with virtualization, the Trust Domain Extensions (TDX) support for KVM virtualization looks like it will finally be mainlined.

Like with some elements of AMD SEV support taking a long time to work their way into the mainline kernel, it’s also been a drawn out process getting all aspects of the Trust Domain Extensions to the mainline tree. An important one looks like it’s now ready for merging the next cycle: Intel TDX for KVM.

Intel TDX KVM code queued

This week Paolo Bonzini of Red Hat queued the Intel TDX for KVM support into the KVM kernel code’s “next” branch. With this merge, the Intel TDX support is now positioned for submission when the Linux 6.16 merge window opens in late May or early June. Bonzini explains in that merge message:

“This large commit contains the initial support for TDX in KVM. All x86 parts enable the host-side hypercalls that KVM uses to talk to the TDX module, a software component that runs in a special CPU mode called SEAM (Secure Arbitration Mode).

The series is in turn split into multiple sub-series, each with a separate merge commit:

– Initialization: basic setup for using the TDX module from KVM, plus ioctls to create TDX VMs and vCPUs.

– MMU: in TDX, private and shared halves of the address space are mapped by different EPT roots, and the private half is managed by the TDX module. Using the support that was added to the generic MMU code in 6.14, add support for TDX’s secure page tables to the Intel side of KVM. Generic KVM code takes care of maintaining a mirror of the secure page tables so that they can be queried efficiently, and ensuring that changes are applied to both the mirror and the secure EPT.

– vCPU enter/exit: implement the callbacks that handle the entry of a TDX vCPU (via the SEAMCALL TDH.VP.ENTER) and the corresponding save/restore of host state.

– Userspace exits: introduce support for guest TDVMCALLs that KVM forwards to userspace. These correspond to the usual KVM_EXIT_* “heavyweight vmexits” but are triggered through a different mechanism, similar to VMGEXIT for SEV-ES and SEV-SNP.

– Interrupt handling: support for virtual interrupt injection as well as handling VM-Exits that are caused by vectored events. Exclusive to TDX are machine-check SMIs, which the kernel already knows how to handle through the kernel machine check handler (commit 7911f145de5f, “x86/mce: Implement recovery for errors in TDX/SEAM non-root mode”)

– Loose ends: handling of the remaining exits from the TDX module, including EPT violation/misconfig and several TDVMCALL leaves that are handled in the kernel (CPUID, HLT, RDMSR/WRMSR, GetTdVmCallInfo); plus returning an error or ignoring operations that are not supported by TDX guests”

Intel TDX is used for creating Trusted Execution Environments (TEEs) for hardware isolation of VMs from the host environment. There is also remote attestation support with TDX.

Intel TDX diagram

Intel TDX was introduced with select SKUs for Sapphire Rapids for cloud providers and reached broader availability with Xeon Emerald Rapids.

Sign Up For Daily Newsletter

Be keep up! Get the latest breaking news delivered straight to your inbox.
By signing up, you agree to our Terms of Use and acknowledge the data practices in our Privacy Policy. You may unsubscribe at any time.
Share This Article
Facebook Twitter Email Print
Share
What do you think?
Love0
Sad0
Happy0
Sleepy0
Angry0
Dead0
Wink0
Previous Article Pinta 3.0 Image Editing Program Released With Port To GTK4
Next Article I’m Hyped for GameCube Classics Like F-Zero GX on the Switch 2, But Nintendo Can Learn a Lot From Emulators
Leave a comment

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Stay Connected

248.1k Like
69.1k Follow
134k Pin
54.3k Follow

Latest News

Altnet calls on UK comms regulator to prevent rural broadband stagnation | Computer Weekly
News
Arkane Studios Founder Calls Game Pass ‘Unsustainable’ After Xbox Layoffs
Software
Cable TV Fumbled the Future, Now Streaming Owns It
News
China objects to EU tariffs on EV imports, pushes for negotiation · TechNode
Computing

You Might also Like

Computing

China objects to EU tariffs on EV imports, pushes for negotiation · TechNode

2 Min Read
Computing

Today’s Threats Move Fast—Your SIEM Needs to Move Faster | HackerNoon

9 Min Read
Computing

GNOME 49 Alpha Released With X11 Support Disabled By Default, Many New Features

3 Min Read
Computing

SenseTime cuts back in Singapore following restructuring · TechNode

1 Min Read
//

World of Software is your one-stop website for the latest tech news and updates, follow us now to get the news that matters to you.

Quick Link

  • Privacy Policy
  • Terms of use
  • Advertise
  • Contact

Topics

  • Computing
  • Software
  • Press Release
  • Trending

Sign Up for Our Newsletter

Subscribe to our newsletter to get our newest articles instantly!

World of SoftwareWorld of Software
Follow US
Copyright © All Rights Reserved. World of Software.
Welcome Back!

Sign in to your account

Lost your password?