INFRA Signal 391
Linux Patched For Safe RET Interrupt Vulnerability
↗
Illustration only Photo by Aaron McLean on Unsplash
A newly disclosed vulnerability in Linux's Speculative Return Stack Overflow (SRSO) mitigation for AMD Zen processors has been patched in the latest kernel code.
This finding shows that even security mitigations can introduce new attack surfaces. Engineers running AMD Zen 1 to 4 systems must update their kernels to close a side channel that could be exploited despite existing protections.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
The vulnerability lies in the Linux kernel's handling of the SRSO mitigation for AMD Zen 1 through Zen 4 processors.
A patch has been merged into the newest Linux kernel Git code, meaning the fix is available but not yet in stable releases.
The flaw demonstrates that speculative execution mitigations themselves can be incomplete and require ongoing scrutiny.
THE CLUSTER