In the Linux kernel, the following vulnerability has been resolved:
x86/speculation: Fill RSB on vmexit for IBRS
Prevent RSB underflow/poisoning attacks with RSB. While at it, add a bunch of comments to attempt to document the current state of tribal knowledge about RSB attacks and what exactly is being mitigated.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d7f72b6e1bc630bec7e4cd51814bc2b092bf153",
"deprecated": false,
"digest": {
"function_hash": "208345415191589002455943522285796146171",
"length": 2100.0
},
"target": {
"function": "spectre_v2_select_mitigation",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2022-49611-0173ca4a",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4d7f72b6e1bc630bec7e4cd51814bc2b092bf153",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"274986475040291301565606591517178150950",
"192539018931780010416739744148308735041",
"143048095291392909366066565057348159295",
"176059178512586051783473722493239694173",
"327956925833970621472153717684253581871"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2022-49611-2131810b",
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8c38306e2e9257af4af2819aa287a4711ff36329",
"deprecated": false,
"digest": {
"function_hash": "208345415191589002455943522285796146171",
"length": 2100.0
},
"target": {
"function": "spectre_v2_select_mitigation",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2022-49611-38e614d3",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f744b88dfc201bf8092833ec70b23c720188b527",
"deprecated": false,
"digest": {
"function_hash": "3610953998649834013218352343502279163",
"length": 315.0
},
"target": {
"function": "vmexit_fill_RSB",
"file": "arch/x86/include/asm/nospec-branch.h"
},
"id": "CVE-2022-49611-3a2d79ac",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d323b99ff5c8c57005184056d65f6af5b0479d8",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"274986475040291301565606591517178150950",
"192539018931780010416739744148308735041",
"143048095291392909366066565057348159295",
"176059178512586051783473722493239694173",
"327956925833970621472153717684253581871"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2022-49611-3d8a4ab2",
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f744b88dfc201bf8092833ec70b23c720188b527",
"deprecated": false,
"digest": {
"function_hash": "336198519944582677771343195639752682074",
"length": 2086.0
},
"target": {
"function": "spectre_v2_select_mitigation",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2022-49611-47a6f8d0",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9756bba28470722dacb79ffce554336dd1f6a6cd",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"274986475040291301565606591517178150950",
"192539018931780010416739744148308735041",
"143048095291392909366066565057348159295",
"176059178512586051783473722493239694173",
"327956925833970621472153717684253581871"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2022-49611-49921843",
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17a9fc4a7b91f8599223631bb6ae6416bc0de1c0",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"274986475040291301565606591517178150950",
"192539018931780010416739744148308735041",
"143048095291392909366066565057348159295",
"176059178512586051783473722493239694173",
"327956925833970621472153717684253581871"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2022-49611-57c26109",
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8c38306e2e9257af4af2819aa287a4711ff36329",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"274986475040291301565606591517178150950",
"192539018931780010416739744148308735041",
"143048095291392909366066565057348159295",
"176059178512586051783473722493239694173",
"327956925833970621472153717684253581871"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2022-49611-57d57ad3",
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d323b99ff5c8c57005184056d65f6af5b0479d8",
"deprecated": false,
"digest": {
"function_hash": "3610953998649834013218352343502279163",
"length": 315.0
},
"target": {
"function": "vmexit_fill_RSB",
"file": "arch/x86/include/asm/nospec-branch.h"
},
"id": "CVE-2022-49611-78f7cf43",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8d5cff499a6d740c91ff37963907e0e983c37f0f",
"deprecated": false,
"digest": {
"function_hash": "208345415191589002455943522285796146171",
"length": 2100.0
},
"target": {
"function": "spectre_v2_select_mitigation",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2022-49611-82ead49f",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f744b88dfc201bf8092833ec70b23c720188b527",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"283338473155153477369076036877363715278",
"235513374455400672614864675319173774519",
"233372268957035524800312380480491653678",
"200509476145057598793596941488833594622"
]
},
"target": {
"file": "arch/x86/include/asm/nospec-branch.h"
},
"id": "CVE-2022-49611-8df59368",
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d323b99ff5c8c57005184056d65f6af5b0479d8",
"deprecated": false,
"digest": {
"function_hash": "336198519944582677771343195639752682074",
"length": 2086.0
},
"target": {
"function": "spectre_v2_select_mitigation",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2022-49611-a2207424",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f744b88dfc201bf8092833ec70b23c720188b527",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"274986475040291301565606591517178150950",
"192539018931780010416739744148308735041",
"143048095291392909366066565057348159295",
"176059178512586051783473722493239694173",
"327956925833970621472153717684253581871"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2022-49611-a2743e2d",
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9756bba28470722dacb79ffce554336dd1f6a6cd",
"deprecated": false,
"digest": {
"function_hash": "208345415191589002455943522285796146171",
"length": 2100.0
},
"target": {
"function": "spectre_v2_select_mitigation",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2022-49611-a9defe37",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8d5cff499a6d740c91ff37963907e0e983c37f0f",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"274986475040291301565606591517178150950",
"192539018931780010416739744148308735041",
"143048095291392909366066565057348159295",
"176059178512586051783473722493239694173",
"327956925833970621472153717684253581871"
]
},
"target": {
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2022-49611-ce45a2c0",
"signature_version": "v1",
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@17a9fc4a7b91f8599223631bb6ae6416bc0de1c0",
"deprecated": false,
"digest": {
"function_hash": "208345415191589002455943522285796146171",
"length": 2100.0
},
"target": {
"function": "spectre_v2_select_mitigation",
"file": "arch/x86/kernel/cpu/bugs.c"
},
"id": "CVE-2022-49611-d66e1e18",
"signature_version": "v1",
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d323b99ff5c8c57005184056d65f6af5b0479d8",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"58831887415826491199780487897718501552",
"273171841162480646494439537340146387401",
"169436972933492676746397356876772722315",
"210627729853539746149981160317071152743",
"298975539439223690297977952736590037761",
"283338473155153477369076036877363715278",
"235513374455400672614864675319173774519",
"233372268957035524800312380480491653678",
"200509476145057598793596941488833594622",
"276965619738772935352284868740422318416",
"153943142629275256036525593903026458610",
"291055936845638629664585628115841415851",
"39824541254059068956356736940411295947"
]
},
"target": {
"file": "arch/x86/include/asm/nospec-branch.h"
},
"id": "CVE-2022-49611-fb53b27c",
"signature_version": "v1",
"signature_type": "Line"
}
]