From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-wr1-f45.google.com (mail-wr1-f45.google.com [209.85.221.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 1818C4B04B1 for ; Fri, 7 Aug 2026 04:22:54 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.221.45 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786076576; cv=none; b=dbmsZjtEl/9RK7eIMx9+g/IxGG2hnPkmAHDF+oG4gYimt1mH+cVJcWg7rSlFqaC3fJBMNlr6yWLqdrvtOpZmXtZ6zUHZLW2fzK5+LqeZVAlfw9PxZG5M7uMIeC3seYjR7miJm+gn18Jn/OHQXezXA1HXzQu5l1uOulJct2iZCKw= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786076576; c=relaxed/simple; bh=iFF1Ii4BbRtvgCuTzJ+dT2gNzke1lY9L5cq82zA0A+E=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=NlnQHRNV2Dhpv+TG581ofvW/NKLa+g62gn5R2N/MglJ0v5bZwHH37JKgOH92zSx0HUHLJLUgsN+qXe1cV4mGMhuoBxU6LpPqsA2TCGz8tmVCrC2r6rMNn+J/mK+1wZ2Wjy+FsplG8UQdMSK2He2PJR4TlmxuzmS8CapNNaiVa8U= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=debian.org; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=HiTXdcfG; arc=none smtp.client-ip=209.85.221.45 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=debian.org Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="HiTXdcfG" Received: by mail-wr1-f45.google.com with SMTP id ffacd0b85a97d-472326ca506so1901607f8f.2 for ; Thu, 06 Aug 2026 21:22:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1786076573; x=1786681373; darn=vger.kernel.org; h=in-reply-to:content-disposition:content-type:mime-version :references:message-id:subject:cc:to:from:date:sender:from:to:cc :subject:date:message-id:reply-to:content-type; bh=GwROwkmiHrpoWilT8NKMPgQZsuspf+l7q9+MCcf4wEo=; b=HiTXdcfGDz7onJuRKB6A2B2omxntwVrToqPHW4OPyjR3VE1BcA5nDUHnVE1OzJBA+j Q5KbcleSjs9YWgMFjVDrlbLA7HJUKmzYYxbwsaIMY/thpI6kOiD/SFwSG35ANcvnSc1c rO7Mf+WPQpkDp7OSPTragg0CrO7bhJttHKEPr1pdZy2cdKZeLcTOedIpwkxB8NpepVy0 YkSDMhrknS+nBvXXYtWtTZ4TzARdReOVcIf4MqvDOG3c9Rh+gAEEVyXKuHvqwmWdH92/ DUiKcCIzzSxcLvBzPAfgUMBvuhVi7dc+pQNkEJi+hHx35kEuLWVIp0OMHFV6fN6lsxd3 i/Fg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786076573; x=1786681373; h=in-reply-to:content-disposition:content-type:mime-version :references:message-id:subject:cc:to:from:date:sender:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=GwROwkmiHrpoWilT8NKMPgQZsuspf+l7q9+MCcf4wEo=; b=YmybEw2kHix6e9iR6o0arfIzjp/PZO/nnDNIkTFSbHbCmCQ2vo2dje2E9/hWeDRdr/ iTjkOUN09m1Lq6XRczYn8D2+4RN0pPPeFeCfo/H7wAeKfvC+mtgh2JbVZO1iR+VEn0Uj dVDBp7MjqWEQqKKXtHOrGzN0nHrrNt3XWLvYPtd6gyLmzsuF2im8upjrZKtF6+tM/4/0 4FXXyR2Ox4emfK97BVEjoWZxRTjuU8Y9VaC80VaMm6PIbixEXduQ4lgXqtWDyeRIvvXZ 2vpE6QRxHa6auNAn5Q1YZ31y5VPOLLwvfsghVohwtcelQ4N+mdoEU8vzPhL7rxsXefsr AM1Q== X-Gm-Message-State: AOJu0YxZsYf+A9MhBKgrgZsoOmATZY+y5/26b2HCDMfhf7QHKsmzr+yT kt9BuNKAk10RKVfsK8icu38Q+lSUoM0rqri94FOYiY0Qmjsi23rIQABaID2msiur X-Gm-Gg: AR+sD12IoQCkobfynLHReId0yj0amkq8Gi5JyBreDh1OH8B2h13Cgb+SN2+vDh5bgzL olvQ51pN2lYxHVXY/xYN30nz9cYwA3t/GEizkLfxXUfwJufZUPfiekk2eq69UTYWj/PaAGt97yl f3pQRAKf1Xg4oEicZn3wQzu0191WEdCbrq73ZrewS3FcQbxxWqEnUAYauu0dkRO8Ckj9xAeorBo 8Z+t4fARzjbIUExwxhfREhWHiqNhfoLCPm2ATdD1djtYURhMe9nRGMSmyXzDDGIvQpr28yRRAoo KatFx6L+EcYNnm7WYqurrsw60ntAHPttUCP+e77MN5DqhlimrtzPt1S9CzN7uM+LMfoMRvuFR+n tArz863F2qxM4NfmXSOLhy5aKKt8IB+j5IcUWFzYrp/+PEo8O0zuWZkD4VqcYPIFP7dcsTET76o q91GJwPX3SFeChyXSluzhkqYCSvIkuW25u0CMTDG7f1IRqu/basjsAT4Y3y9kU287Z8bUZXlxO2 jdkfrM6fsZtgN47d566Oj7a X-Received: by 2002:a5d:624a:0:b0:47f:9750:26cc with SMTP id ffacd0b85a97d-47fec630b5cmr24277446f8f.23.1786076573196; Thu, 06 Aug 2026 21:22:53 -0700 (PDT) Received: from eldamar.lan (c-82-192-247-196.customer.ggaweb.ch. [82.192.247.196]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-480021e902dsm1786284f8f.21.2026.08.06.21.22.50 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 06 Aug 2026 21:22:51 -0700 (PDT) Sender: Salvatore Bonaccorso Received: by eldamar.lan (Postfix, from userid 1000) id 41479BE2DE0; Fri, 07 Aug 2026 06:22:50 +0200 (CEST) Date: Fri, 7 Aug 2026 06:22:50 +0200 From: Salvatore Bonaccorso To: Greg Kroah-Hartman , Borislav Petkov Cc: linux-kernel@vger.kernel.org, stable@vger.kernel.org, David Kaplan Subject: CVE-2026-68480 mitigations for older stable series (was: Re: Linux 6.6.149) Message-ID: References: <2026080618-mulch-nullify-723f@gregkh> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <2026080618-mulch-nullify-723f@gregkh> Hi Greg, hi Borislav, On Thu, Aug 06, 2026 at 07:32:17PM +0200, Greg Kroah-Hartman wrote: > I'm announcing the release of the 6.6.149 kernel. > > All users of the 6.6 kernel series must upgrade. > > The updated 6.6.y git tree can be found at: > git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.6.y > and can be browsed at the normal kernel.org git web browser: > https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary It got mentioned outside of the stable list that the backports of 7e7f81cf6f5c ("x86/bugs: Make Safe-RET robust against interrupt injection") to address CVE-2026-68480 will not work. So raising the problem here. In fact at least they depend on CONFIG_MITIGATION_SRSO, which only was renamed in a033eec9a06c ("x86/bugs: Rename CONFIG_CPU_SRSO => CONFIG_MITIGATION_SRSO") v6.9-rc1, correct? Borislav, can you have a look for the older backports? Regards, Salvatore