Since Linux 5.18 there has been Indirect Branch Tracking (IBT) in the mainline kernel that was contributed by Intel as part of their Control-flow Enforcement Technology (CET)
With Linux 6.4-rc1 released, here is my original overview of all the interesting changes coming for the Linux 6.4 kernel that will be released as stable at the end of June or in early July. As the Linux 6.4 merge window is over, it's time to begin testing this new kernel (and in my case, benchmarking it for any interesting improvements or regressions) over the next roughly eight weeks.
Intel Shaodw Stack support was submitted for Linux 6.4 at the start of the merge window but now with this two-week merge window drawing to a close, it hasn't been pulled yet and Linus Torvalds raised technical issues with the proposed patches that now jeopardize its arrival this cycle.
While Intel Shadow Stack support has been around since Tiger Lake CPUs as part of Intel's Control-flow Enforcement Technology (CET), finally for the Linux 6.4 kernel is this security feature being enabled with the mainline Linux kernel.
Low-Level Software Security for Compiler Developers llsoftsec.github.io - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from llsoftsec.github.io Daily Mail and Mail on Sunday newspapers.