Patch "x86/xen: init %gs very early to avoid page faults with stack protector" has been added to the 4.14-stable tree