Commit 6d35786de281 for kernel

commit 6d35786de28116ecf78797a62b84e6bf3c45aa5a
Merge: 7fd2df204f34 0cb2af2ea66a
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sun May 3 15:25:47 2026 -0700

    Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

    Pull kvm fixes from Paolo Bonzini:
     "Three bug fixes for x86:

       - Check that nEPT/nNPT is enabled in slow flush hypercalls. If it is
         not, the hypercalls can be processed as usual even while running a
         nested guest

       - Fix shadow paging use-after-free due to page tables changing
         outside execution of the guest. A bug that is 16 years old and
         stems from an imprecision in the very first KVM series

       - Scan IRR whenever PID.ON is true, even if PIR is empty, which
         avoids a somewhat rare WARN"

    * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm:
      KVM: x86: Fix shadow paging use-after-free due to unexpected GFN
      KVM: x86: Fix misleading variable names and add more comments for PIR=>IRR flow
      KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty
      KVM: x86: check for nEPT/nNPT in slow flush hypercalls