A flaw was found in the Linux kernels implementation of IBPB ( Indirect Branch Prediction Barrier ). The IBPB mitigation will be disabled when STIBP is not available or when Enhanced Indirect Branch Restricted Speculation (IBRS) is available. This is not expected behaviour and leave the system open to a spectre v2 style attack. This can allow a local attacker to perform a spectre V2 style attack when this configuration is active.
This makes the CPU vulnerable to Spectre v2.
Mitigation: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Created kernel tracking bugs for this issue: Affects: fedora-all [bug 1847375]
FEDORA-2020-125ccdc871 has been pushed to the Fedora 32 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2020-1b2dae6219 has been pushed to the Fedora 31 stable repository. If problem still persists, please make note of it in this bug report.
Statement: This flaw is rated as having Important impact, because it enables exploitation of the previous Spectre v2 attack, which has a rating of Important.
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2020:3010 https://access.redhat.com/errata/RHSA-2020:3010
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2020:3016 https://access.redhat.com/errata/RHSA-2020:3016
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2020-10767
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions Via RHSA-2020:3041 https://access.redhat.com/errata/RHSA-2020:3041
This issue has been addressed in the following products: Red Hat Enterprise Linux 8 Via RHSA-2020:3073 https://access.redhat.com/errata/RHSA-2020:3073
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.1 Extended Update Support Via RHSA-2020:3222 https://access.redhat.com/errata/RHSA-2020:3222
This issue has been addressed in the following products: Red Hat Enterprise Linux 8.1 Extended Update Support Via RHSA-2020:3297 https://access.redhat.com/errata/RHSA-2020:3297
External References: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=21998a351512eba4ed5969006f0c55882d995ada