Description
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection An attacker injecting interrupts while the Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return sequence, potentially leading to data leakage through speculative execution. Fixup register state as if the Safe-RET sequence executed successfully by "emulating" it, in a manner of speaking, and avoid executing a RET instruction after returning from the interrupt.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
3f9b7101bea1dcb63410c016ceb266f6e9f733c9 to < dfefa3c51370f84acb643cddf98bb42c885d0483affectedb35087763a44d1eb45857f799579a351332be505 to < 52db77a13be224e09eb4ba6b4252ae8ab9085c2caffectedac41e90d8daa8815d8bee774a1975435fbfe1ae7 to < d0208e08d64d99383e09852a76cc3038c5a4c3abaffectedfb3bd914b3ec28f5fb697ac55c4846ac2d542855 to < 6703dba1d14cbd6647cd1ccfa3a3fa94b64dd096affectedfb3bd914b3ec28f5fb697ac55c4846ac2d542855 to < e262f28a69ae9e0791248f93b0173c1d1f3e1d5daffectedfb3bd914b3ec28f5fb697ac55c4846ac2d542855 to < bfe7f9993467ba431b2731437949ac1e2634e771affectedfb3bd914b3ec28f5fb697ac55c4846ac2d542855 to < 61649a2d61cb0dbc673f0f232f0f0c298bf50442affectedfb3bd914b3ec28f5fb697ac55c4846ac2d542855 to < 7e7f81cf6f5ca3311e526308f55d7c54d3ba71f9affectedacdc883eb61efbe01b954e782e1124790bd391a8affected5.10.189 to < 5.10.264affected5.15.125 to < 5.15.215affected6.1.44 to < 6.1.182affected6.4.9 to < 6.5affected
Linux Linux
Default version status: affected
6.5affected0 to < 6.5unaffected5.10.264 to ≤ 5.10.*unaffected5.15.215 to ≤ 5.15.*unaffected6.1.182 to ≤ 6.1.*unaffected6.6.150 to ≤ 6.6.*unaffected6.12.102 to ≤ 6.12.*unaffected6.18.43 to ≤ 6.18.*unaffected7.1.7 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/dfefa3c51370f84acb643cddf98bb42c885d0483 ↗
- https://git.kernel.org/stable/c/52db77a13be224e09eb4ba6b4252ae8ab9085c2c ↗
- https://git.kernel.org/stable/c/d0208e08d64d99383e09852a76cc3038c5a4c3ab ↗
- https://git.kernel.org/stable/c/6703dba1d14cbd6647cd1ccfa3a3fa94b64dd096 ↗
- https://git.kernel.org/stable/c/e262f28a69ae9e0791248f93b0173c1d1f3e1d5d ↗
- https://git.kernel.org/stable/c/bfe7f9993467ba431b2731437949ac1e2634e771 ↗
- https://git.kernel.org/stable/c/61649a2d61cb0dbc673f0f232f0f0c298bf50442 ↗
- https://git.kernel.org/stable/c/7e7f81cf6f5ca3311e526308f55d7c54d3ba71f9 ↗
- https://people.csail.mit.edu/mengjia/data/2026.USENIX.TONTOU.pdf ↗