5 ms·
> Instead of flushing the entire branch predictor state, AMD proposed a different mitigation for the Linux kernel. By reducing all returns in the kernel to a si
by ireallywantthat 3y ago
> Instead of flushing the entire branch predictor state, AMD proposed a different mitigation for the Linux kernel. By reducing all returns in the kernel to a single one, it becomes possible to ensure a safe (but still incorrect) branch predictor state each time this return is executed. Keeping previous mitigations in mind, this effectively means that AMD opted to have all indirect branches forcibly mispredict to a benign location, preventing Inception attacks.
So, There will be no decrease in performance or any other performance impact if you are running Linux kernel.
- duskwuff 3y agoAs I understand it, there is likely to be a performance decrease when executing indirect branches within the kernel.
- mjevans 3y agoMy understanding (which could be incorrect) is that the single return location clobbers the branch predictor's leaked data with static and (attack) worthless data without completely clearing the rest of the prediction cache.
- duskwuff 3y agoRight, which means the CPU can't effectively predict indirect branches (like calls through function pointers, or certain types of switch statements).