|
|
Message-ID: <14ad9b085cb3fb4b3a9fc091dde74540@metztli.com> Date: Wed, 29 Jul 2026 17:15:46 -0700 From: Jose R Rodriguez <jose.r.r@...ztli.com> To: oss-security@...ts.openwall.com Cc: Pawan Gupta <pawan.kumar.gupta@...ux.intel.com> Subject: Re: Backports available - cBPF JIT spray hardening On 2026-07-29 13:04, Pawan Gupta wrote: > Hi All, > > This is an inform distro maintainers about recently upstreamed > hardening > against speculative execution attacks using BPF JIT spraying. > > The backports are available here: > > 6.1 - > https://lore.kernel.org/all/20260727-cbpf-jit-spray-hardening-6-1-y-v1-0-eb80dcf1eb6e@linux.intel.com > 6.6 - > https://lore.kernel.org/all/20260717-cbpf-jit-spray-hardening-6-6-y-v1-0-e04f1b2893de@linux.intel.com > 6.12 - > https://lore.kernel.org/all/20260715-cbpf-jit-spray-hardening-6-12-y-v1-0-d8585a9aed80@linux.intel.com > 6.18 - > https://lore.kernel.org/all/20260713-cbpf-jit-spray-hardening-6-18-y-v1-0-755f60c55705@linux.intel.com > 7.1 - > https://lore.kernel.org/all/20260709-cbpf-jit-spray-hardening-7-1-y-v1-0-5ac5a2d6797f@linux.intel.com > > 6.1 backport is queued. Others are part of LTS kernels. > > 5.15 and older do not support pack allocator for BPF on which the > hardening > is based on. So the series is not directly applicable to 5.15 and > older, > and may need custom hardening patches. Any patches out there for kernel 5.17.15? Thanks in advance! > > Please let me know if there are any questions. > > Thanks, > Pawan -- Best Professional Regards. -- Jose R R http://metztli.it --------------------------------------------------------------------------------------------- Download Metztli Reiser4: Debian Trixie w/ Linux 5.17.15-3 AMD64 --------------------------------------------------------------------------------------------- feats ZSTD compression https://sf.net/projects/metztli-reiser4/ ------------------------------------------------------------------------------------------- Official current Reiser4 resources: https://reiser4.wiki.kernel.org/
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.