linux 修复intel漏洞,【图片】Linux 4.20内核修复了幽灵V2漏洞，但英特尔CPU会损失50%性能【linux游戏吧】_百度贴吧...

该楼层疑似违规已被系统折叠 隐藏此楼查看此楼

git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/log/

Merge branch 'x86-pti-for-linus'

Pull STIBP fallout fixes from Thomas Gleixner:

"The performance destruction department finally got it's act together

and came up with a cure for the STIPB regression:

- Provide a command line option to control the spectre v2 user space

mitigations. Default is either seccomp or prctl (if seccomp is

disabled in Kconfig). prctl allows mitigation opt-in, seccomp

enables the migitation for sandboxed processes.

- Rework the code to handle the conditional STIBP/IBPB control and

remove the now unused ptrace_may_access_sched() optimization

attempt

- Disable STIBP automatically when SMT is disabled

- Optimize the switch_to() logic to avoid MSR writes and invocations

of __switch_to_xtra().

- Make the asynchronous speculation TIF updates synchronous to

prevent stale mitigation state.

As a general cleanup this also makes retpoline directly depend on

compiler support and removes the 'minimal retpoline' option which just

pretended to provide some form of security while providing none"