The Opportunities and Limitations of Extended Page Table Switching for Fine-Grained Isolation
Vikram Narayanan, Anton Burtsev · IEEE Security & Privacy · 2023
Extended Page Table switching with VMFUNC is a hardware isolation mechanism available in Intel CPUs. VMFUNC is attractive for low overhead and the possibility to isolate privileged kernel code. However, many careful design decisions are needed to ensure the security of the isolation boundary.