Enable return-thunks
configname: CONFIG_MITIGATION_RETHUNK
Linux Kernel Configuration
└─>Mitigations for CPU vulnerabilities
└─>Enable return-thunks
In linux kernel since version 6.1.89 (release Date: 2024-04-29)
Compile the kernel with the return-thunks compiler option to guard
against kernel-to-user data leaks by avoiding return speculation.
Requires a compiler with -mfunction-return=thunk-extern
support for full protection. The kernel may run slower.
against kernel-to-user data leaks by avoiding return speculation.
Requires a compiler with -mfunction-return=thunk-extern
support for full protection. The kernel may run slower.