diff --git a/hypervisor/include/arch/x86/asm/vm_config.h b/hypervisor/include/arch/x86/asm/vm_config.h
index 7e58a88b5..4fb937575 100644
--- a/hypervisor/include/arch/x86/asm/vm_config.h
+++ b/hypervisor/include/arch/x86/asm/vm_config.h
@@ -56,6 +56,9 @@
 /* Bitmask of guest flags that can be programmed by device model. Other bits are set by hypervisor only. */
 #if (SERVICE_VM_NUM == 0)
 #define DM_OWNED_GUEST_FLAG_MASK	0UL
+#elif defined(CONFIG_RELEASE)
+#define DM_OWNED_GUEST_FLAG_MASK	(GUEST_FLAG_SECURE_WORLD_ENABLED | GUEST_FLAG_LAPIC_PASSTHROUGH \
+					| GUEST_FLAG_RT | GUEST_FLAG_IO_COMPLETION_POLLING)
 #else
 #define DM_OWNED_GUEST_FLAG_MASK	(GUEST_FLAG_SECURE_WORLD_ENABLED | GUEST_FLAG_LAPIC_PASSTHROUGH \
 					| GUEST_FLAG_RT | GUEST_FLAG_IO_COMPLETION_POLLING | GUEST_FLAG_PMU_PASSTHROUGH)