Linux 6.8.5 & Other Stable Kernel Updates Due To Native BHI Vulnerability

[phoronix]

Phoronix: Linux 6.8.5 & Other Stable Kernel Updates Due To Native BHI Vulnerability

Due to yesterday's Native BHI vulnerability disclosure affecting all Intel processors with this variant of Branch History Injection (BHI) not requiring BPF to exploit, a slew of new Linux kernel stable releases are out today to back-port this security mitigation...

https://www.phoronix.com/news/Linux-685-Mitigates-Native-BHI

[bezirg]

Thank you in advance Michael for the benchmark.

[dragorth]

The new exploit is more dangerous because it doesn't need unprivileged access? I think this is supposed to say privileged?

[Michael]

The new exploit is more dangerous because it doesn't need unprivileged access? I think this is supposed to say privileged?

Original exploit needed unprivileged BPF to which some admins/vendors disabled BPF in turn... Now you don't need BPF to exploit with Native BHI.

[quaz0r]

so does mitigations=off still cover all of this crap?

[Weasel]

so does mitigations=off still cover all of this crap?

It's Spectre so it should.