Project

General

Profile

Bug #11787

Kernel needs to be built with retpolines

Added by John Levon 6 days ago. Updated 6 days ago.

Status:
New
Priority:
Normal
Assignee:
Category:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Difficulty:
Medium
Tags:

Description

http://smartos.org/bugview/OS-7598

To mitigate the impact of SpectreV2 we need to build the operating system with retpolines and make sure that we properly change them and fallback when enhanced IBRS is present as well as properly enable the AMD variant.


Related issues

Related to illumos gate - Bug #11788: Kernel needs to generally use RSB stuffingNew

Actions

History

#1

Updated by John Levon 6 days ago

Work originally by Robert Mustacchi.

Note that as well as just enablign the compiler-generated retpoline thunks, we need to fix up all the assembly pieces we have to call the retpolines as needed.

We haven't done this for KMDB as it's hard to see an attack vector, and it's not really worth it.

#2

Updated by Joshua M. Clulow 6 days ago

  • Related to Bug #11788: Kernel needs to generally use RSB stuffing added

Also available in: Atom PDF