For migration as well as to work around kernels unaware of L1TF (see
XSA-273), PV guests may be run in shadow paging mode
Details
Security vulnerability affects the xen package. For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode.