NetSight
medium5.5

CVE-2022-49611

In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attacks with R…

Impact

In the Linux kernel, the following vulnerability has been resolved: x86/speculation: Fill RSB on vmexit for IBRS Prevent RSB underflow/poisoning attacks with RSB. While at it, add a bunch of comments to attempt to document the current state of tribal knowledge about RSB attacks and what exactly is being mitigated.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.14.297
from 4.15 before 4.19.266
from 4.20 before 5.4.217
from 5.5 before 5.10.133
from 5.11 before 5.15.57
from 5.16 before 5.18.14

References