Summary
[6.12.0-103.40.4.2.el10uek]
- x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38343659]
- x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38343659]
- x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38343659]
- x86/vmscape: Add conditional IBPB mitigation (Pawan Gupta) [Orabug: 38343659]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Josh Poimboeuf) [Orabug: 38343659]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Josh Poimboeuf) [Orabug: 38343659]
- x86/vmscape: Add old Intel CPUs to affected list (Pawan Gupta) [Orabug: 38343659]
- x86/vmscape: Enumerate VMSCAPE bug (Pawan Gupta) [Orabug: 38343659]
- Documentation/hw-vuln: Add VMSCAPE documentation (Pawan Gupta) [Orabug: 38343659]
Fixed packages 35
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | kernel-uek | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-core | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-debug | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-core | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-devel | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-core | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-deprecated | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-desktop | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-extra | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-extra-netfilter | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-usb | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-debug-modules-wireless | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-devel | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-doc | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-modules | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-modules-core | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-modules-deprecated | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-modules-desktop | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-modules-extra | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-modules-extra-netfilter | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-modules-usb | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-modules-wireless | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek-tools | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek64k | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek64k-core | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek64k-devel | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules-core | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules-deprecated | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules-desktop | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules-extra | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules-extra-netfilter | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules-usb | 0:6.12.0-103.40.4.2.el10uek |
| Oracle Linux · 9 | kernel-uek64k-modules-wireless | 0:6.12.0-103.40.4.2.el10uek |
Vulnerabilities 1
-
Unscored —
x86/vmscape: Add conditional IBPB mitigation
In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor (like QEMU). Existing …