[PATCH Kinetic 0/1] Fix boot on some cloud instance types

Thadeu Lima de Souza Cascardo cascardo at canonical.com
Thu Jul 28 12:35:17 UTC 2022


[Impact]
Some cloud instance types do not provide IBPB support and yet are AMD
processors vulnerable to Retbleed. In those cases, the kernel will try
to use IBPB when calling EFI firmware and will crash at boot.

[Fix]
The fix was submitted upstream just recently, so it's still SAUCE.

[Potential regression]
Some systems might be left vulnerable to theoretical speculation info
leak attacks.

Thadeu Lima de Souza Cascardo (1):
  UBUNTU: SAUCE: x86/bugs: Do not enable IBPB at firmware entry when
    IBPB is not available

 arch/x86/kernel/cpu/bugs.c | 1 +
 1 file changed, 1 insertion(+)

-- 
2.34.1




More information about the kernel-team mailing list