Re: Status of Intel CET in Debian

Stephan Verbücheln <[email protected]> Wed, 15 Oct 2025 13:47:31 +0000
Newsgroups gmane.linux.debian.devel.security
Message-ID <[email protected]>
--=-t7fwmZURO2HWhRgLtiJF
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

The same problem exists on two more systems.

List of tested systems:

> Intel Core i7-1370P (Lenovo ThinkPad X1)
> Intel Core i7-12700 (HP Victus)
> Intel Core i7-13700H (Dell XPS 15)

Only three binaries in /usr/bin show the properties in readelf:

> /usr/bin/dbxtool
> /usr/bin/fwupdmgr
> /usr/bin/fwupdtool

Example:

   $ readelf -n /usr/bin/fwupdmgr=20
  =20
   Displaying notes found in: .note.gnu.property
     Owner                Data size 	Description
     GNU                  0x00000020	NT_GNU_PROPERTY_TYPE_0
         Properties: x86 feature: IBT, SHSTK
   	x86 ISA needed: x86-64-baseline
  =20
   Displaying notes found in: .note.gnu.build-id
     Owner                Data size 	Description
     GNU                  0x00000014	NT_GNU_BUILD_ID (unique build ID bitst=
ring)
       Build ID: e4c9e755d233cd5f5fdc801e8a3b46c96a82f79a
  =20
   Displaying notes found in: .note.ABI-tag
     Owner                Data size 	Description
     GNU                  0x00000010	NT_GNU_ABI_TAG (ABI version tag)
       OS: Linux, ABI: 3.2.0


Regards
Stephan

--=-t7fwmZURO2HWhRgLtiJF
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----

iHUEABYKAB0WIQRB1rjSpCJd8a7h6mNgNUJZCjx8YgUCaO+l8AAKCRBgNUJZCjx8
YhWpAQCXsmgp26SlWKtRSXgWfZFYS6eYy6LeOQ3EqqFPsaZwcgD/TiY9UcAm3Oly
aIwjrLbqair6uJ4np63Gxfxe1u1tSA8=
=vvfM
-----END PGP SIGNATURE-----

--=-t7fwmZURO2HWhRgLtiJF--