Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This is from /var/log/dmesg

Your BIOS has requested that x2apic be disabled.
This will leave your machine vulnerable to irq-injection attacks.
Use 'intremap=no_x2apic_optout' to override BIOS request.
Enabled IRQ remapping in xapic mode
share|improve this question
up vote 4 down vote accepted

There's some interesting discussion of it on the linux kernel list, referring to this paper. In short, a guest OS which has access to some hardware could raise interrupts on the host OS and cause the code that handles those interrupts to run. At best (from the defense's standpoint) this could cause strange behavior or crashes as the software tries to handle hardware events that aren't happening. At worst it might exercise a vulnerability and lead to a host compromise (people don't tend to write drivers assuming that the hardware lies to them). It's somewhat of a corner case and lots of things need to go wrong to make it a problem, but there's a warning for it anyway.

If you're not running VMs on the server, don't worry about it. If you are, well, you may want to look into hardware with a newer (smarter) BIOS :)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.