Avoid speculative indirect branches in kernel
configname: CONFIG_MITIGATION_RETPOLINE
Linux Kernel Configuration
└─>Mitigations for CPU vulnerabilities
└─>Avoid speculative indirect branches in kernel
In linux kernel since version 4.19.314 (release Date: 2024-05-17)
Compile kernel with the retpoline compiler options to guard against
kernel-to-user data leaks by avoiding speculative indirect
branches. Requires a compiler with -mindirect-branch=thunk-extern
support for full protection. The kernel may run slower.
kernel-to-user data leaks by avoiding speculative indirect
branches. Requires a compiler with -mindirect-branch=thunk-extern
support for full protection. The kernel may run slower.