config/x86_64/default

file modified

+3 -0

patches.suse/KVM-VMX-Convert-launched-argument-to-flags.patch

file added

+166

patches.suse/KVM-VMX-Fix-IBRS-handling-after-vmexit.patch

file added

+38

patches.suse/KVM-VMX-Flatten-__vmx_vcpu_run.patch

file added

+192

patches.suse/KVM-VMX-Prevent-RSB-underflow-before-vmenter.patch

file added

+169

patches.suse/KVM-VMX-Prevent-guest-RSB-poisoning-attacks-with-eIBRS.patch

file added

+250

patches.suse/crypto-x86-poly1305-fixup-sls.patch

file added

+208

patches.suse/intel_idle-Disable-IBRS-during-long-idle.patch

file added

+186

patches.suse/objtool-Add-entry-UNRET-validation.patch

file added

+467

patches.suse/objtool-Re-add-UNWIND_HINT_-SAVE_RESTORE.patch

file added

+182

patches.suse/objtool-Treat-.text.__x86.-as-noinstr.patch

file added

+33

patches.suse/objtool-Update-Retpoline-validation.patch

file added

+107

patches.suse/objtool-add-straight-line-speculation-validation.patch

file added

+126

patches.suse/objtool-fix-sibling-call-detection-in-alternatives.patch

file added

+99

patches.suse/static_call-x86-robustify-trampoline-patching.patch

file added

+101

patches.suse/x86-Add-magic-AMD-return-thunk.patch

file added

+333

patches.suse/x86-Undo-return-thunk-damage.patch

file added

+190

patches.suse/x86-Use-return-thunk-in-asm-code.patch

file added

+109

patches.suse/x86-add-straight-line-speculation-mitigation.patch

file added

+188

patches.suse/x86-alternative-relax-text_poke_bp-constraint.patch

file added

+168

patches.suse/x86-bpf-Use-alternative-RET-encoding.patch

file added

+63

patches.suse/x86-bugs-Add-AMD-retbleed-boot-parameter.patch

file added

+211

patches.suse/x86-bugs-Add-Cannon-lake-to-RETBleed-affected-CPU-list.patch

file added

+30

patches.suse/x86-bugs-Add-retbleed-ibpb.patch

file added

+263

patches.suse/x86-bugs-Do-IBPB-fallback-check-only-once.patch

file added

+48

patches.suse/x86-bugs-Do-not-enable-IBPB-on-entry-when-IBPB-is-not-supp.patch

file added

+46

patches.suse/x86-bugs-Enable-STIBP-for-JMP2RET.patch

file added

+144

patches.suse/x86-bugs-Keep-a-per-CPU-IA32_SPEC_CTRL-value.patch

file added

+115

patches.suse/x86-bugs-Optimize-SPEC_CTRL-MSR-writes.patch

file added

+112

patches.suse/x86-bugs-Report-AMD-retbleed-vulnerability.patch

file added

+177

patches.suse/x86-bugs-Report-Intel-retbleed-vulnerability.patch

file added

+178

patches.suse/x86-bugs-Split-spectre_v2_select_mitigation-and-spectre_v2.patch

file added

+103

patches.suse/x86-common-Stamp-out-the-stepping-madness.patch

file added

+77

patches.suse/x86-cpu-amd-Add-Spectral-Chicken.patch

file added

+104

patches.suse/x86-cpu-amd-Enumerate-BTC_NO.patch

file added

+80

patches.suse/x86-cpufeatures-Move-RETPOLINE-flags-to-word-11.patch

file added

+44

patches.suse/x86-entry-Add-kernel-IBRS-implementation.patch

file added

+311

patches.suse/x86-ftrace-Use-alternative-RET-encoding.patch

file added

+38

patches.suse/x86-ibt-paravirt-use-text_gen_insn-for-paravirt_patch.patch

file added

+94

patches.suse/x86-kexec-Disable-RET-on-kexec.patch

file added

+169

patches.suse/x86-kvm-Fix-SETcc-emulation-for-return-thunks.patch

file added

+90

patches.suse/x86-kvm-vmx-Make-noinstr-clean.patch

file added

+78

patches.suse/x86-lib-atomic64_386_32-rename-things.patch

file added

+245

patches.suse/x86-mce-drop-copyin-special-case-for-mc.patch

file added

+52

patches.suse/x86-mm-simplify-reserve_brk.patch

file added

+70

patches.suse/x86-objtool-Create-.return_sites.patch

file added

+194

patches.suse/x86-prepare-asm-files-for-straight-line-speculation.patch

file added

+3204

patches.suse/x86-prepare-inline-asm-for-straight-line-speculation.patch

file added

+184

patches.suse/x86-retpoline-Cleanup-some-ifdefery.patch

file added

+91

patches.suse/x86-retpoline-Swizzle-retpoline-thunk.patch

file added

+37

patches.suse/x86-retpoline-Use-mfunction-return.patch

file added

+70

patches.suse/x86-sev-Avoid-using-__x86_return_thunk.patch

file added

+47

patches.suse/x86-speculation-Add-spectre_v2-ibrs-option-to-support-Kern.patch

file added

+212

patches.suse/x86-speculation-Fill-RSB-on-vmexit-for-IBRS.patch

file added

+131

patches.suse/x86-speculation-Fix-RSB-filling-with-CONFIG_RETPOLINE-n.patch

file added

+81

patches.suse/x86-speculation-Fix-SPEC_CTRL-write-on-SMT-state-change.patch

file added

+33

patches.suse/x86-speculation-Fix-firmware-entry-SPEC_CTRL-handling.patch

file added

+45

patches.suse/x86-speculation-Remove-x86_spec_ctrl_mask.patch

file added

+87

patches.suse/x86-speculation-Use-cached-host-SPEC_CTRL-value-for-guest-.patch

file added

+56

patches.suse/x86-speculation-rename-retpoline_amd-to-retpoline_lfence.patch

file modified

+1 -1

patches.suse/x86-static_call-Use-alternative-RET-encoding.patch

file added

+195

patches.suse/x86-use-mindirect-branch-cs-prefix-for-retpoline-builds.patch

file added

+39

patches.suse/x86-vsyscall_emu-64-Don-t-use-RET-in-vsyscall-emulation.patch

file added

+47

patches.suse/x86-xen-Rename-SYS-entry-points.patch

file added

+130

series.conf

file modified

+64 -0