Project

General

Profile

Bug #11788

Kernel needs to generally use RSB stuffing

Added by John Levon 6 days ago. Updated 6 days ago.

Status:
New
Priority:
Normal
Assignee:
Category:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Difficulty:
Medium
Tags:

Description

http://smartos.org/bugview/OS-7621

While RSB stuffing is required when implementing retpolines as in #11787, we actually need to more generally enable the use of retpolines. In particular, it has been proven that there are various techniques required to mitigate spectre on older systems where RSB stuffing is required. Note, while Skylake+ systems require RSB stuffing to protect them from cases where the kernel is influenced, we also need to perform RSB stuffing to make sure that we clear the state out on context switch and VM entry/exit to get us into a better state for other possible attacks.


Related issues

Related to illumos gate - Bug #11787: Kernel needs to be built with retpolinesNew

Actions

History

#1

Updated by John Levon 6 days ago

Work originally by Robert Mustacchi.

#2

Updated by Joshua M. Clulow 6 days ago

  • Related to Bug #11787: Kernel needs to be built with retpolines added
#3

Updated by Joshua M. Clulow 6 days ago

  • Description updated (diff)

Also available in: Atom PDF