Tweet
Phoronix: Intel Sends Out Latest Patches Preparing Linux CET Virtualization
Since Linux 5.18 there has been Indirect Branch Tracking (IBT) in the mainline kernel that was contributed by Intel as part of their Control-flow Enforcement Technology (CET). For Linux 6.4 Intel engineers tried to get the Shadow Stack support mainlined as the other part of CET, but issues were uncovered at the last minute. Hopefully Shadow Stack support will be merged for the v6.5 cycle but beyond that host support, Intel engineers have also been working on CET virtualization for enabling these security features for use within virtual machines...
Since Linux 5.18 there has been Indirect Branch Tracking (IBT) in the mainline kernel that was contributed by Intel as part of their Control-flow Enforcement Technology (CET). For Linux 6.4 Intel engineers tried to get the Shadow Stack support mainlined as the other part of CET, but issues were uncovered at the last minute. Hopefully Shadow Stack support will be merged for the v6.5 cycle but beyond that host support, Intel engineers have also been working on CET virtualization for enabling these security features for use within virtual machines...
