CONFIG_HARDEN_EL2_VECTORS: Harden EL2 vector mapping against system register leak

General informations

The Linux kernel configuration item CONFIG_HARDEN_EL2_VECTORS:

• prompt: Harden EL2 vector mapping against system register leak
• type: bool
• depends on: CONFIG_EXPERT
• defined in arch/arm64/Kconfig
• found in Linux kernels: 4.17–4.20, 5.0–5.8

Help text

Speculation attacks against some high-performance processors can be used to leak privileged information such as the vector base register, resulting in a potential defeat of the EL2 layout randomization.

This config option will map the vectors to a fixed location, independent of the EL2 code mapping, so that revealing VBAR_EL2 to an attacker does not give away any extra information. This only gets enabled on affected CPUs.

If unsure, say Y.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: