Stéphane Lesimple ee618ead07 enh: detect IPBP return predictor bypass in Inception/SRSO ("PB-Inception") (#500) ...

AMD Zen 1-3 CPUs don't flush return predictions on IBPB, allowing
cross-process Spectre attacks even with IBPB-on-entry active. The kernel
fix (v6.12+, backported) adds RSB fill after IBPB on affected CPUs.
Detect this gap by checking CPUID IBPB_RET bit and kernel ibpb_no_ret
bug flag, and flag systems relying on IBPB without the RSB fill fix.

2026-04-08 22:35:52 +02:00

.github/workflows

feat: add SLS (Straight-Line Speculation) check with --extra option

2026-04-08 22:35:52 +02:00

dist

feat: implement CVE-2023-28746 (RFDS, Register File Data Sampling)

2026-04-08 22:35:52 +02:00

scripts

enh: auto-generate intel model list

2026-04-02 22:33:48 +02:00

src

enh: detect IPBP return predictor bypass in Inception/SRSO ("PB-Inception") (#500)

2026-04-08 22:35:52 +02:00

.gitignore

chore: add .gitignore

2026-03-30 23:07:59 +02:00

build.sh

chore: set VERSION when building

2026-03-31 00:18:09 +02:00

DEVELOPMENT.md

enh: add known fixed ucode versions for CVE-2023-23583 (Reptar) and CVE-2024-45332 (BPI)

2026-04-04 16:07:12 +00:00

Makefile

dev-build workflow

2026-03-30 23:07:59 +02:00

UNSUPPORTED_CVE_LIST.md

doc: add CVE-2021-26318 (ADM Prefetch) to unsupported list

2026-04-08 22:35:52 +02:00

Description

No description provided

cve-2017-5715cve-2017-5753cve-2017-5754cve-2018-3615cve-2018-3620cve-2018-3639cve-2018-3640cve-2018-3646cve-2019-11135dragonflybsdforeshadowfreebsdkernellinuxmeltdownmitigationnetbsdspectrezombieload

3.8 MiB

Languages

Shell 100%