Re: Backports available - cBPF JIT spray hardening

[Jose R Rodriguez <jose.r.r () metztli com>]

On 2026-07-29 13:04, Pawan Gupta wrote:
> Hi All,
>
> This is an inform distro maintainers about recently upstreamed 
> hardening
> against speculative execution attacks using BPF JIT spraying.
>
> The backports are available here:
>
>   6.1  - 
> https://lore.kernel.org/all/20260727-cbpf-jit-spray-hardening-6-1-y-v1-0-eb80dcf1eb6e () linux intel com
>   6.6  - 
> https://lore.kernel.org/all/20260717-cbpf-jit-spray-hardening-6-6-y-v1-0-e04f1b2893de () linux intel com
>   6.12 - 
> https://lore.kernel.org/all/20260715-cbpf-jit-spray-hardening-6-12-y-v1-0-d8585a9aed80 () linux intel com
>   6.18 - 
> https://lore.kernel.org/all/20260713-cbpf-jit-spray-hardening-6-18-y-v1-0-755f60c55705 () linux intel com
>   7.1  - 
> https://lore.kernel.org/all/20260709-cbpf-jit-spray-hardening-7-1-y-v1-0-5ac5a2d6797f () linux intel com
>
> 6.1 backport is queued. Others are part of LTS kernels.
>
> 5.15 and older do not support pack allocator for BPF on which the 
> hardening
> is based on. So the series is not directly applicable to 5.15 and 
> older,
> and may need custom hardening patches.

Any patches out there for kernel 5.17.15? Thanks in advance!

> Please let me know if there are any questions.
>
> Thanks,
> Pawan

--
Best Professional Regards.

--
Jose R R
http://metztli.it
---------------------------------------------------------------------------------------------
Download Metztli Reiser4: Debian Trixie w/ Linux 5.17.15-3 AMD64
---------------------------------------------------------------------------------------------
feats ZSTD compression https://sf.net/projects/metztli-reiser4/
-------------------------------------------------------------------------------------------
Official current Reiser4 resources: https://reiser4.wiki.kernel.org/