x86/bugs: Report correct retbleed mitigation status
authorDavid Kaplan <david.kaplan@amd.com>
Mon, 15 Sep 2025 13:47:06 +0000 (08:47 -0500)
committerBorislav Petkov (AMD) <bp@alien8.de>
Tue, 16 Sep 2025 11:32:18 +0000 (13:32 +0200)
commit930f2361fe542a00de9ce6070b1b6edb976f1165
treebc301b1b020be4725aac5d4321a624dff9eca468
parentd1cc1baef67ac6c09b74629ca053bf3fb812f7dc
x86/bugs: Report correct retbleed mitigation status

On Intel CPUs, the default retbleed mitigation is IBRS/eIBRS but this
requires that a similar spectre_v2 mitigation is applied.  If the user
selects a different spectre_v2 mitigation (like spectre_v2=retpoline) a
warning is printed but sysfs will still report 'Mitigation: IBRS' or
'Mitigation: Enhanced IBRS'.  This is incorrect because retbleed is not
mitigated, and IBRS is not actually set.

Fix this by choosing RETBLEED_MITIGATION_NONE in this scenario so the
kernel correctly reports the system as vulnerable to retbleed.

Signed-off-by: David Kaplan <david.kaplan@amd.com>
Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Link: https://lore.kernel.org/20250915134706.3201818-1-david.kaplan@amd.com
arch/x86/kernel/cpu/bugs.c