[Linux-stable-mirror] [PATCH 4.9 37/92] KVM: VMX: Make indirect call speculation safe