Arm Posts New GCC Compiler Patches Due To New Vulnerability Affecting ARMv8-M TrustZone

[phoronix]

Phoronix: Arm Posts New GCC Compiler Patches Due To New Vulnerability Affecting ARMv8-M TrustZone

Made public on Monday was CVE-2021-35465 as a new security vulnerability affecting various Arm products. For unmitigated (ARMv8-M) hardware, Arm has posted a series of GCC compiler patches for working around the issue...

https://www.phoronix.com/scan.php?page=news_item&px=Arm-GCC-CVE-2021-35465

[Adarion]

Does that mean we'll suddenly see fixes for all the AGESA stuff for CPUs/APUs with PSPs? (I doubt it, even if AMD released AGESA, a lot of mainboard vendors will be lazy to release anything, esp. for older boards.)

Otoh, that means we still have black boxes in our systems with known (and yet not publically known) weaknesses, running untrustable (sic!) code in this so called "trusted execution environment" on lowest level, ring minus X, totally transparent to our OS.
Yeah. Thanks for incorporating this crap.

It would be really about time AMD, intel and whoever else would release proper code and documentations to these embedded processors and microcontrollers. So we can trust our own hardware again.