Description
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT spraying when Spectre-v2 mitigations are in use. Specifically, issue an IBPB flush on BPF JIT memory reuse. Skip enabling the IBPB flush if the BPF dispatcher is already using a retpoline sequence. This hardening applies only when BPF-JIT is in use. Guard the enabling under CONFIG_BPF_JIT so that bugs.c still builds with CONFIG_BPF_JIT=n.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
57631054fae6dcc9c892ae6310b58bbb6f6e5048 to < 25dbcd31781e2bc3cd63d873af1fcd06f863a126affected57631054fae6dcc9c892ae6310b58bbb6f6e5048 to < cb27f3bf915cc0f20fc0c48da9059304e39ebd35affected57631054fae6dcc9c892ae6310b58bbb6f6e5048 to < 9354248fc1c33a844ca1872761f6668b393e8c37affected57631054fae6dcc9c892ae6310b58bbb6f6e5048 to < 8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1affected57631054fae6dcc9c892ae6310b58bbb6f6e5048 to < 52440e15d9628f8f239373c0f2e5e8f92feea2dfaffected57631054fae6dcc9c892ae6310b58bbb6f6e5048 to < a3af84b0fa00ead01fcd0e28b5d773ff25990a0daffected
Linux Linux
Default version status: affected
5.18affected0 to < 5.18unaffected6.1.183 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.97 to ≤ 6.12.*unaffected6.18.39 to ≤ 6.18.*unaffected7.1.4 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/25dbcd31781e2bc3cd63d873af1fcd06f863a126 ↗
- https://git.kernel.org/stable/c/cb27f3bf915cc0f20fc0c48da9059304e39ebd35 ↗
- https://git.kernel.org/stable/c/9354248fc1c33a844ca1872761f6668b393e8c37 ↗
- https://git.kernel.org/stable/c/8a4c8af9ae67eb072d90d1b339f14d27a82bd2a1 ↗
- https://git.kernel.org/stable/c/52440e15d9628f8f239373c0f2e5e8f92feea2df ↗
- https://git.kernel.org/stable/c/a3af84b0fa00ead01fcd0e28b5d773ff25990a0d ↗