Summary
[6.12.0-1.23.3.1]
- x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta) [Orabug: 37920680]
- x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon) [Orabug: 37920680]
- x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon) [Orabug: 37920680]
- selftest/x86/bugs: Add selftests for ITS (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add 'vmexit' option to skip mitigation on some CPUs (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add support for ITS-safe return thunk (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta) [Orabug: 37863725] {CVE-2024-28956}
Fixed packages 33
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | kernel-uek | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-core | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-debug | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-debug-core | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-debug-devel | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-debug-modules | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-core | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-deprecated | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-desktop | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-extra | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-extra-netfilter | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-usb | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-wireless | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-devel | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-doc | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-modules | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-modules-core | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-modules-deprecated | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-modules-desktop | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-modules-extra | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-modules-extra-netfilter | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-modules-usb | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek-modules-wireless | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek64k | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek64k-core | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek64k-modules | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek64k-modules-core | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek64k-modules-deprecated | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek64k-modules-desktop | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek64k-modules-extra | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek64k-modules-extra-netfilter | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek64k-modules-usb | 0:6.12.0-1.23.3.1.el9uek |
| Oracle Linux · 9 | kernel-uek64k-modules-wireless | 0:6.12.0-1.23.3.1.el9uek |
Vulnerabilities 1
-
Medium 5.6
Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) …