Bug#1012222: linux: please enable the CONFIG_X86_KERNEL_IBT configuration option

[Laurent Bonnaud <L.Bonnaud@laposte.net>]

Package: src:linux
Version: 5.18.0-trunk
Severity: wishlist


Dear kernel Maintainers,

the CONFIG_X86_KERNEL_IBT configuration option is currently not enabled in Debian kernels:

$ grep CONFIG_X86_KERNEL_IBT /boot/config*
/boot/config-5.18.0-trunk-amd64:# CONFIG_X86_KERNEL_IBT is not set
/boot/config-5.18.0-trunk-rt-amd64:# CONFIG_X86_KERNEL_IBT is not set

It is an important protection against ROP/JOP attacks.  Could you please enable it in Debian kernels?

Thanks,

--
Laurent.