Re: CVE-2026-68480 mitigations for older stable series (was: Re: Linux 6.6.149)

From: Borislav Petkov

Date: Fri Aug 07 2026 - 02:34:27 EST


On Thu, Aug 06, 2026 at 09:30:32PM -0700, Borislav Petkov wrote:
> Hi,
>
> On Fri, Aug 07, 2026 at 06:22:50AM +0200, Salvatore Bonaccorso wrote:
> > In fact at least they depend on CONFIG_MITIGATION_SRSO, which only was
> > renamed in a033eec9a06c ("x86/bugs: Rename CONFIG_CPU_SRSO
> > => CONFIG_MITIGATION_SRSO") v6.9-rc1, correct?
>
> Yeah, I'm very sorry about that.
>
> > Borislav, can you have a look for the older backports?
>
> Already sent fixed versions to Greg, waiting for him to wake up.

Fixes are out now.

--
Regards/Gruss,
Boris.

https://people.kernel.org/tglx/notes-about-netiquette