In the Linux kernel, the following vulnerability has been resolved:
x86/speculation: Fill RSB on vmexit for IBRS
Prevent RSB underflow/poisoning attacks with RSB. While at it, add a bunch of comments to attempt to document the current state of tribal knowledge about RSB attacks and what exactly is being mitigated.
[
{
"target": {
"file": "arch/x86/kernel/cpu/bugs.c",
"function": "spectre_v2_select_mitigation"
},
"digest": {
"function_hash": "208345415191589002455943522285796146171",
"length": 2100.0
},
"id": "CVE-2022-49611-0173ca4a",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d7f72b6e1bc630bec7e4cd51814bc2b092bf153",
"signature_version": "v1",
"signature_type": "Function"
},
{
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"digest": {
"line_hashes": [
"274986475040291301565606591517178150950",
"192539018931780010416739744148308735041",
"143048095291392909366066565057348159295",
"176059178512586051783473722493239694173",
"327956925833970621472153717684253581871"
],
"threshold": 0.9
},
"id": "CVE-2022-49611-2131810b",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d7f72b6e1bc630bec7e4cd51814bc2b092bf153",
"signature_version": "v1",
"signature_type": "Line"
},
{
"target": {
"file": "arch/x86/kernel/cpu/bugs.c",
"function": "spectre_v2_select_mitigation"
},
"digest": {
"function_hash": "208345415191589002455943522285796146171",
"length": 2100.0
},
"id": "CVE-2022-49611-38e614d3",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8c38306e2e9257af4af2819aa287a4711ff36329",
"signature_version": "v1",
"signature_type": "Function"
},
{
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"digest": {
"line_hashes": [
"274986475040291301565606591517178150950",
"192539018931780010416739744148308735041",
"143048095291392909366066565057348159295",
"176059178512586051783473722493239694173",
"327956925833970621472153717684253581871"
],
"threshold": 0.9
},
"id": "CVE-2022-49611-57d57ad3",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8c38306e2e9257af4af2819aa287a4711ff36329",
"signature_version": "v1",
"signature_type": "Line"
}
]