Full virtualization & the TLB

In the case of full virtualization, is it correct that both the host OS and the guest OS share the same TLB? Or does the guest OS have a separate TLB managed elsewhere (perhaps by the VMM)?

There is only one TLB. That’s one of the tough things to handle in this case, since the host OS and VMM have to ensure that the entries that the guest OS loads into the TLB are not unsafe.