Stuffing the return stack buffer [LWN.net]

Stuffing the return stack buffer

Posted Jul 24, 2022 11:45 UTC (Sun) by kenmoffat (guest, #4807)
In reply to: Stuffing the return stack buffer by kenmoffat
Parent article: Stuffing the return stack buffer

I've been told that Ice Lake and later, except Alder Lake are vulnerable, and that the mitigation will also run on Alder Lake until new firmware is applied. See INTEL-SA-00702

to post comments

Stuffing the return stack buffer

Posted Jul 24, 2022 14:13 UTC (Sun) by mss (subscriber, #138799) [Link] (1 responses)

The Intel affected CPU model page says that Ice Lake models are not affected by INTEL-SA-00702.

eIBRS parts had their own vulnerability in March (the relevant paper is here), which apparently can also be used to mount Retbleed-style attacks.

Stuffing the return stack buffer

Posted Jul 24, 2022 20:24 UTC (Sun) by kenmoffat (guest, #4807) [Link]

So yes, not exactly the same vulnerability, but the same mitigation.