Bug 12374

Summary: CONFIG_RETPOLINE is disabled on aarch64 and armv5tel
Product: IPFire Reporter: Peter Müller <peter.mueller>
Component: ---Assignee: Peter Müller <peter.mueller>
Status: CLOSED ERRATA QA Contact:
Severity: Security    
Priority: Will only affect a few users CC: peter.mueller
Version: 2   
Hardware: unspecified   
OS: All   
Bug Depends on:    
Bug Blocks: 12361    

Description Peter Müller 2020-04-14 15:39:26 UTC 
Quote from https://capsule8.com/blog/kernel-configuration-glossary/:

> Significance: High
> 
> Compile kernel with the retpoline compiler options to guard against
> kernel-to-user data leaks by avoiding speculative indirect branches. Requires
> a compiler with -mindirect-branch=thunk-extern support for full protection.
> The kernel may run slower. (duh!)
Comment 1 Peter Müller 2020-06-09 17:24:52 UTC 
https://patchwork.ipfire.org/patch/3173/
Comment 2 Peter Müller 2022-07-28 13:58:32 UTC 
Retpoline is not available on any architecture besides x86. Silly me.