Enable return-thunks
configname: CONFIG_RETHUNK
Linux Kernel Configuration
└─>Mitigations for CPU vulnerabilities
└─>Enable return-thunks
In linux kernel since version 4.14.326 (release Date: 2023-09-23)
Compile the kernel with the return-thunks compiler option to guard
against kernel-to-user data leaks by avoiding return speculation.
Requires a compiler with -mfunction-return=thunk-extern
support for full protection. The kernel may run slower.
against kernel-to-user data leaks by avoiding return speculation.
Requires a compiler with -mfunction-return=thunk-extern
support for full protection. The kernel may run slower.