Show Your Support: Have you heard of Phoronix Premium? It's what complements advertisements on this site for our premium ad-free service. For less than $4 USD per month, you can help support our site while the funds generated allow us to keep doing Linux hardware reviews, performance benchmarking, maintain our community forums, and much more.
New Linux Patch Series Provides A Fresh Take On Intel Indirect Branch Tracking
For months there has been work on supporting Intel Control-Flow Enforcement Technology's Indirect Branch Tracking feature in the Linux kernel. The most recent revision of that I am aware of is the v30 patches sent out last August. But those patches were never merged nor even any Linux kernel mailing list comments to that revision.
With that current Intel CET/IBT work appearing to have stalled without being mainlined, Intel's Peter Zijlstra has posted a new and different IBT patch series. This new series though is in a "request for comments" phase and hasn't even been tested on newer processors with IBT hardware yet.
The code is incomplete on this new take but adds the X86_IBT build option, enables "-fcf-protection=branch" support for the compiler, and has the objtool changes and other work for adding the ENDBR instruction for possible indirect branch targets. Kernel entry points have the ENDBR "end branch" instruction added.
This new Linux kernel IBT patch series can be found on the kernel mailing list. We'll see this time if it gets worked into something that will ultimately be upstreamed.