[Linux-stable-mirror] [PATCH 4.14 06/64] KVM: VMX: Make indirect call speculation safe