Version: 6.3.1-1~exp1 Hi Laurent, Le 2022-06-01 18:53, Laurent Bonnaud a écrit : > Package: src:linux > Version: 5.18.0-trunk > Severity: wishlist > > > Dear kernel Maintainers, > > the CONFIG_X86_KERNEL_IBT configuration option is currently not enabled in Debian kernels: > > $ grep CONFIG_X86_KERNEL_IBT /boot/config* > /boot/config-5.18.0-trunk-amd64:# CONFIG_X86_KERNEL_IBT is not set > /boot/config-5.18.0-trunk-rt-amd64:# CONFIG_X86_KERNEL_IBT is not set > > It is an important protection against ROP/JOP attacks. Could you please enable it in Debian kernels? Let's close this report since kernel IBT is enabled by default starting with Linux 6.2+ [1]. > Thanks, > > -- > Laurent. Cheers, Vincent [1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4fd5f70ce14da230c6a29648c3d51a48ee0b4bfd
Attachment:
signature.asc
Description: PGP signature