Linux Now Mitigating Hygon CPUs For Inception/SRSO Vulnerability

Written by Michael Larabel in Linux Security on 1 October 2023 at 06:37 AM EDT. Add A Comment
Disclosed back in August was the Inception vulnerability affecting all Zen processors. It took until today though for the mainline Linux kernel to mitigate Hygon processors for this vulnerability for those Zen 1 CPUs formed from the AMD-Chinese joint venture.

With the Hygon processors being based on Zen 1, it was assumed Hygon was affected too by this CPU security vulnerability from August. But due to only a few days ago was the patch sent out for mitigating the Speculative Return Stack Overflow (SRSO / Inception) on these processors. Mitigating is just a one-liner that requires just adding "SRSO" to the 0x18 Hygon family for then following the mitigated kernel path written by AMD engineers, so it's a bit surprising it took so long to act.

Hygon SRSO patch

The AMD bulletin describes SRSO / Inception as a speculative side channel attack that could lead to information disclosure:
"This attack is similar to previous branch prediction-based attacks like Spectrev2 and Branch Type Confusion (BTC)/RetBleed. As with similar attacks, speculation is constrained within the current address space and to exploit, an attacker must have knowledge of the address space and control of sufficient registers at the time of RET (return from procedure) speculation. Hence, AMD believes this vulnerability is only potentially exploitable locally, such as via downloaded malware, and recommends customers employ security best practices, including running up-to-date software and malware detection tools."

In any event this pull request of x86 fixes sent in for Linux 6.6-rc4 will mitigate Hygon processors for the SRSO/Inception vulnerability from mid-August.
Related News
About The Author
Michael Larabel

Michael Larabel is the principal author of and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via

Popular News This Week