Lines Matching full:mitigation
6 This is a mitigation for the speculative return stack overflow (SRSO)
39 The sysfs file showing SRSO mitigation status is:
52 - 'Mitigation: microcode' Extended IBPB functionality microcode
61 - 'Mitigation: safe RET' Software-only mitigation. It complements
69 - 'Mitigation: IBPB' Similar protection as "safe RET" above
76 - 'Mitigation: IBPB on VMEXIT' Mitigation addressing the cloud provider
95 Considering the performance implications of each mitigation type, the
96 default one is 'Mitigation: safe RET' which should take care of most
105 As one can surmise, 'Mitigation: safe RET' does come at the cost of some
108 disable the mitigation with spec_rstack_overflow=off.
110 Similarly, 'Mitigation: IBPB' is another full mitigation type employing
112 microcode patch for one's system. This mitigation comes also at
115 Mitigation: safe RET
118 The mitigation works by ensuring all RET instructions speculate to
124 To ensure the safety of this mitigation, the kernel must ensure that the