Get the latest tech news
FineIBT-BHI Looks To Be Ready Ahead Of Linux 6.15 To Provide Tougher Kernel Defenses
FineIBT-BHI as a means of tougher kernel defenses for fending off Branch History Injection (BHI) looks like it will be ready for upstreaming in next month's Linux 6.15 merge window.
FineIBT-BHI as a means of tougher kernel defenses for fending off Branch History Injection (BHI) looks like it will be ready for upstreaming in next month's Linux 6.15 merge window. On a patched Linux kernel build and built with a supported compiler, the FineIBT-BHI mitigation can be enabled with the "cfi=fineibt+bhi" boot option. With the FineIBT-BHI mitigation patches now appearing in TIP x86/core, it's likely to be submitted for the Linux 6.15 merge window in a few weeks -- barring any last minute objections or show-stopping code problems from being reported.
Or read this on Phoronix