Re: CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection

[Borislav Petkov]

On Thu, Aug 06, 2026 at 03:42:00PM -0700, Borislav Petkov wrote:
> On Thu, Aug 06, 2026 at 11:42:59PM +0200, Thomas Lamprecht wrote:
> > > 	Fixed in 5.10.263 with commit 9de1a49e8f1fbf7c372902573a27a97d4ab4d0af
> > > 	Fixed in 5.15.214 with commit 9c0b8105e919be5208c81d5516a194a28c58fe1e
> > > 	Fixed in 6.1.181 with commit 95b08cdd603fe79d2e9d5212fbb13d577c835f4f
> > > 	Fixed in 6.6.149 with commit 608c8f5dccaaf8b8d2b28c0fbdd439d144be62b0
> > 
> > I hope I did not overlooked something, but at least the 6.6 backport seems
> > broken to me as it #ifdef guards the fixes on CONFIG_MITIGATION_SRSO, but that
> > config name is only used in v6.9+ since a033eec9a06ce ("x86/bugs: Rename
> > CONFIG_CPU_SRSO             => CONFIG_MITIGATION_SRSO") [0] FWICT, i.e. before
> > that version it was named CONFIG_CPU_SRSO. So shouldn't be that be used here
> > for all the older pre-v6.9 backports above?
> 
> Thanks for letting me know - I'm fixing.

Hopefully fixed kernels are out now. Sorry for the trouble.

Thx.

-- 
Regards/Gruss,
    Boris.

https://people.kernel.org/tglx/notes-about-netiquette