Messages in this thread | | | Subject | Re: [tip:x86/pti] x86/retpoline: Fill RSB on context switch for affected CPUs | From | Arjan van de Ven <> | Date | Mon, 15 Jan 2018 06:42:03 -0800 |
| |
> > This would means that userspace would see return predictions based > on the values the kernel 'stuffed' into the RSB to fill it. > > Potentially this leaks a kernel address to userspace.
KASLR pretty much died in May this year to be honest with the KAISER paper (if not before then)
also with KPTI the address won't have a TLB mapping so it wouldn't actually be speculated into.
| |