Re: CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection

[Greg Kroah-Hartman]

On Thu, Aug 06, 2026 at 11:31:19PM -0700, Borislav Petkov wrote:
> On Thu, Aug 06, 2026 at 03:42:00PM -0700, Borislav Petkov wrote:
> > On Thu, Aug 06, 2026 at 11:42:59PM +0200, Thomas Lamprecht wrote:
> > > > 	Fixed in 5.10.263 with commit 9de1a49e8f1fbf7c372902573a27a97d4ab4d0af
> > > > 	Fixed in 5.15.214 with commit 9c0b8105e919be5208c81d5516a194a28c58fe1e
> > > > 	Fixed in 6.1.181 with commit 95b08cdd603fe79d2e9d5212fbb13d577c835f4f
> > > > 	Fixed in 6.6.149 with commit 608c8f5dccaaf8b8d2b28c0fbdd439d144be62b0
> > > 
> > > I hope I did not overlooked something, but at least the 6.6 backport seems
> > > broken to me as it #ifdef guards the fixes on CONFIG_MITIGATION_SRSO, but that
> > > config name is only used in v6.9+ since a033eec9a06ce ("x86/bugs: Rename
> > > CONFIG_CPU_SRSO             => CONFIG_MITIGATION_SRSO") [0] FWICT, i.e. before
> > > that version it was named CONFIG_CPU_SRSO. So shouldn't be that be used here
> > > for all the older pre-v6.9 backports above?
> > 
> > Thanks for letting me know - I'm fixing.
> 
> Hopefully fixed kernels are out now. Sorry for the trouble.

Thanks for the quick response, and for Thomas the review.  If there are
any issues with the newly released kernels now, please let us know.

thanks,

greg k-h