From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id EF7952F3C0E for ; Fri, 7 Aug 2026 06:47:18 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786085239; cv=none; b=lBepMZGCzP2lMW+7xuaAjPrnanQNQoIBsLGnI+JEa0VawBR/6w+ywZeKKKNRu0+Ak1V0P79yPI8O0dILLdsorgPNzA2ix6CD1QzNCnm1mTkCQ9FHaMBEya5OCBABzZYjgymba0mDXFDbOYDCtxnR2d/GgSn1Iqq+3Z2aPF92ZLc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786085239; c=relaxed/simple; bh=3N2JquXkOI5QTv0mQ3F+yZN+X9iO6SZinKhM6D6cQDg=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=Wg7M04YERDtUy1cfe+gTTIX89jZOBMdf4B/lRkrUWrdOXQXJzGYFe1UpoJJPhiymtGCPK7AAWMFn0DyMGdmHJCG6RxUsH7leO3P/YKPH9J3mUYe2o695ZQNIUnlcStOcxPAlvYl0dyj5TfCTYqnSxSJTTvn/xogdMvRQenzIAuc= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=oApgmb0O; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="oApgmb0O" Received: by smtp.kernel.org (Postfix) with ESMTPSA id E5E461F000E9; Fri, 7 Aug 2026 06:47:17 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1786085238; bh=hHbVWvsXDoQA6swvUVsMXVf4e0MRRU6if6uTSllyukg=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=oApgmb0O0D+0FhF2X5wnz26Jh5XPLIMEDDjY/6oxfSYcDy9jn8IOlWbNMR5Ksd3b/ 1YH/kiTdM4CzRV5RkPkVrYIgxfEG5kegcmmCqvUW71ChzxpzRtAmpOudULWDj5OjKD +EihX6zsO2Ifsu254pFleEeXauy6HCMqpR+n8STXO7tvM+CWA8lssn42IzP6cheltP WLK+8c6A3j1uCMj1GP9DRJ0OlWlCTEsmFA91M8/N90Mt7gpxxQglopCDTv+XvWE402 6Bysm1xqCU7fp7C/LZNU9mEl4AgY6TvIMZbyH/kfCuxlXugQMxRUhe+9SqUbec9FEN IQkb3yhArB4bQ== Date: Fri, 7 Aug 2026 08:45:45 +0200 From: Greg Kroah-Hartman To: Borislav Petkov Cc: Thomas Lamprecht , linux-kernel@vger.kernel.org, Fabian =?iso-8859-1?Q?Gr=FCnbichler?= Subject: Re: CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection Message-ID: <2026080720-surging-tributary-b2ef@gregkh> References: <2026080631-CVE-2026-68480-ad40@gregkh> <20260806224200.GEanUNuJGjsjgffYw4@fat_crate.local> <20260807063119.GJanV7tw1Zkcuy3Byr@fat_crate.local> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20260807063119.GJanV7tw1Zkcuy3Byr@fat_crate.local> On Thu, Aug 06, 2026 at 11:31:19PM -0700, Borislav Petkov wrote: > On Thu, Aug 06, 2026 at 03:42:00PM -0700, Borislav Petkov wrote: > > On Thu, Aug 06, 2026 at 11:42:59PM +0200, Thomas Lamprecht wrote: > > > > Fixed in 5.10.263 with commit 9de1a49e8f1fbf7c372902573a27a97d4ab4d0af > > > > Fixed in 5.15.214 with commit 9c0b8105e919be5208c81d5516a194a28c58fe1e > > > > Fixed in 6.1.181 with commit 95b08cdd603fe79d2e9d5212fbb13d577c835f4f > > > > Fixed in 6.6.149 with commit 608c8f5dccaaf8b8d2b28c0fbdd439d144be62b0 > > > > > > I hope I did not overlooked something, but at least the 6.6 backport seems > > > broken to me as it #ifdef guards the fixes on CONFIG_MITIGATION_SRSO, but that > > > config name is only used in v6.9+ since a033eec9a06ce ("x86/bugs: Rename > > > CONFIG_CPU_SRSO => CONFIG_MITIGATION_SRSO") [0] FWICT, i.e. before > > > that version it was named CONFIG_CPU_SRSO. So shouldn't be that be used here > > > for all the older pre-v6.9 backports above? > > > > Thanks for letting me know - I'm fixing. > > Hopefully fixed kernels are out now. Sorry for the trouble. Thanks for the quick response, and for Thomas the review. If there are any issues with the newly released kernels now, please let us know. thanks, greg k-h