Re: [PATCH 7.1.y 0/6] cBPF JIT spray hardening
Sasha Levin <[email protected]>
| Newsgroups | dev.linux.lists.loongarch,org.infradead.lists.linux-arm-kernel,org.infradead.lists.linux-riscv,org.kernel.vger.bpf,org.kernel.vger.stable,org.ozlabs.lists.linuxppc-dev |
|---|---|
| Message-ID | <[email protected]> |
On Thu, Jul 09, 2026 at 03:22:54PM -0700, Pawan Gupta wrote: > These backports harden BPF JIT against spectre-v2 class of attacks. Without > a predictor flush, execution of new BPF program may use stale prediction > left behind by the freed one. > > To avoid this, issue an IBPB flush on all CPUs on JIT program allocation. > The flush is conditional to spectre-v2 mitigation applied. Queued the series for 7.1, thanks. -- Thanks, Sasha