Kernel needs to generally use RSB stuffing
While RSB stuffing is required when implementing retpolines as in #11787, we actually need to more generally enable the use of retpolines. In particular, it has been proven that there are various techniques required to mitigate spectre on older systems where RSB stuffing is required. Note, while Skylake+ systems require RSB stuffing to protect them from cases where the kernel is influenced, we also need to perform RSB stuffing to make sure that we clear the state out on context switch and VM entry/exit to get us into a better state for other possible attacks.
Updated by Electric Monk about 1 year ago
- Status changed from New to Closed
- % Done changed from 0 to 100
commit 65f204200cf9a50fd6bad4093ee0b07bc35105ac Author: Robert Mustacchi <email@example.com> Date: 2019-10-22T09:03:00.000Z 11787 Kernel needs to be built with retpolines 11788 Kernel needs to generally use RSB stuffing Reviewed by: Jerry Jelinek <firstname.lastname@example.org> Reviewed by: John Levon <email@example.com> Reviewed by: Paul Winder <firstname.lastname@example.org> Reviewed by: Andy Fiddaman <email@example.com> Approved by: Joshua M. Clulow <firstname.lastname@example.org>