From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 0B34232F765; Fri, 10 Jul 2026 21:03:35 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783717416; cv=none; b=BOH9fko/YHRsX+DGvzyIxQft/XcGpQUa4YES+hFsLnbrQhxYVsZNc3fZlu9rPcyB7M7xx7RZ6xRuFuiKryz470E+OycPfLnAhLEhxWT6It204A1cYov/7HnxbgxqbsF4bS8lGQcTkZGRCkO/fhx869qJStDCoLk4JPhgwtdE6dU= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783717416; c=relaxed/simple; bh=PaUoKvrlMJsfzC7QyZ/UEAlmd9FZMCy8oyKrZV1Iqjo=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=OwMX0izJuODkmfBPe9lK6t/9QJt46uTeJWjt3VDZVpiFmww77fZ5etg+YP2CV9FkEBqxlB/2kBo508KIxmh3FoM+jTRZf9xj5gyhUwBP3Bn/6c0/o1BHC0GMchgCpmncQ7rejSmjy30rmwcvcu2CIeYzSY7K7R+0YqxE+c/n92o= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=TbNNNPck; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="TbNNNPck" Received: by smtp.kernel.org (Postfix) with ESMTPSA id A05B61F00A3D; Fri, 10 Jul 2026 21:03:33 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1783717414; bh=A6ZivBYGr8LA2bUO7cgwXGSWiepiPbzSVpCEbDDI1mc=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=TbNNNPckQrdYDAlUSL/va76XXbFFV/M71lQjXSYpZT/R5DWVOE9hLvDwyepCkV+zw ew9ZsWbwWN3d2JL3oWsBOBLyE83y4owtF0+Eyss+Ai0jBE88hI7KMHwNyYgVLs0tgc R5LE4B1uMRLduiGro3EUze2g8wiC5dBhPdAjQ/NM73CB5K0KQKdHKAEfsrl78RVPG6 c1ric7fIVn82IzCB6bfwmTx6BFo+538W0J9wxsGDn5F9e+dvjbVsL8qBKk44CWUlaE c3IW3rfAYZ38PYZ6FJ2XJCt7tcoLdN+QSeg5ptN2Cn+4OZp0QKT8LywmIqJJEXlp6z 8TOdPmDMZ7dHw== From: Sasha Levin To: stable@vger.kernel.org, Greg Kroah-Hartman Cc: Sasha Levin , bpf@vger.kernel.org, linux-arm-kernel@lists.infradead.org, loongarch@lists.linux.dev, linuxppc-dev@lists.ozlabs.org, linux-riscv@lists.infradead.org, x86@kernel.org, Alexei Starovoitov , Daniel Borkmann , Dave Hansen , Pawan Gupta Subject: Re: [PATCH 7.1.y 0/6] cBPF JIT spray hardening Date: Fri, 10 Jul 2026 17:03:07 -0400 Message-ID: <20260710163023.agent5-0011@kernel.org> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260709-cbpf-jit-spray-hardening-7-1-y-v1-0-5ac5a2d6797f@linux.intel.com> References: <20260709-cbpf-jit-spray-hardening-7-1-y-v1-0-5ac5a2d6797f@linux.intel.com> Precedence: bulk X-Mailing-List: bpf@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit On Thu, Jul 09, 2026 at 03:22:54PM -0700, Pawan Gupta wrote: > These backports harden BPF JIT against spectre-v2 class of attacks. Without > a predictor flush, execution of new BPF program may use stale prediction > left behind by the freed one. > > To avoid this, issue an IBPB flush on all CPUs on JIT program allocation. > The flush is conditional to spectre-v2 mitigation applied. Queued the series for 7.1, thanks. -- Thanks, Sasha