CONFIG_HARDEN_BRANCH_PREDICTOR: Harden the branch predictor against aliasing attacks

General informations

The Linux kernel configuration item CONFIG_HARDEN_BRANCH_PREDICTOR has multiple definitions:

Harden the branch predictor against aliasing attacks found in arch/arm/mm/Kconfig

The configuration item CONFIG_HARDEN_BRANCH_PREDICTOR:

• prompt: Harden the branch predictor against aliasing attacks
• type: bool
• depends on: ( CONFIG_EXPERT ) && ( CONFIG_CPU_SPECTRE )
• defined in arch/arm/mm/Kconfig
• found in Linux kernels: 4.18–4.20, 5.0–5.19, 6.0–6.8, 6.9-rc+HEAD

Help text

Speculation attacks against some high-performance processors rely on being able to manipulate the branch predictor for a victim context by executing aliasing branches in the attacker context. Such attacks can be partially mitigated against by clearing internal branch predictor state and limiting the prediction logic in some situations.

This config option will take CPU-specific actions to harden the branch predictor against aliasing attacks and may rely on specific instruction sequences or control bits being set by the system firmware.

If unsure, say Y.

Harden the branch predictor against aliasing attacks found in arch/arm64/Kconfig

The configuration item CONFIG_HARDEN_BRANCH_PREDICTOR:

• prompt: Harden the branch predictor against aliasing attacks
• type: bool
• depends on: CONFIG_EXPERT
• defined in arch/arm64/Kconfig
• found in Linux kernels: 4.16–4.20, 5.0–5.9

Help text

Speculation attacks against some high-performance processors rely on being able to manipulate the branch predictor for a victim context by executing aliasing branches in the attacker context. Such attacks can be partially mitigated against by clearing internal branch predictor state and limiting the prediction logic in some situations.

This config option will take CPU-specific actions to harden the branch predictor against aliasing attacks and may rely on specific instruction sequences or control bits being set by the system firmware.

If unsure, say Y.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: