Summary
[5.15.0-312.187.5.1]
- x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38343660]
- x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38343660]
- x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38343660]
- x86/vmscape: Add conditional IBPB mitigation (Pawan Gupta) [Orabug: 38343660]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Josh Poimboeuf) [Orabug: 38343660]
- x86/vmscape: Add old Intel CPUs to affected list (Pawan Gupta) [Orabug: 38343660]
- x86/vmscape: Enumerate VMSCAPE bug (Pawan Gupta) [Orabug: 38343660]
- Documentation/hw-vuln: Add VMSCAPE documentation (Pawan Gupta) [Orabug: 38343660]
Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-container | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-container-debug | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek64k | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek64k-core | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek64k-devel | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules | 0:5.15.0-312.187.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules-extra | 0:5.15.0-312.187.5.1.el9uek |
Vulnerabilities 1
-
Unscored —
x86/vmscape: Add conditional IBPB mitigation
In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor (like QEMU). Existing …