[Linux-stable-mirror] [PATCH 4.15 02/60] KVM: VMX: Make indirect call speculation safe