There are a few talks on VMM. The major shortcoming right now is that guests only get one CPU, but as per the talks guest SMP is a priority and will be availab

There are a few talks on VMM. The major shortcoming right now is that guests only get one CPU, but as per the talks guest SMP is a priority and will be available in 3-4 months. I do not follow the verification side much, but what I know is that VMM has some interesting properties. Namely, VMM itself (which handles VM exceptions) does not get more capabilities than the VM, thus dramatically limiting usefulness of a VM escape.