The Linux Kernel
5.4.17
  • The Linux kernel user’s and administrator’s guide
    • Linux kernel release 5.x <http://kernel.org/>
    • The kernel’s command-line parameters
    • Linux allocated devices (4.x+ version)
    • Documentation for /proc/sys
    • Hardware vulnerabilities
      • Spectre Side Channels
      • L1TF - L1 Terminal Fault
      • MDS - Microarchitectural Data Sampling
      • TAA - TSX Asynchronous Abort
      • iTLB multihit
      • SRBDS - Special Register Buffer Data Sampling
      • Core Scheduling
      • Processor MMIO Stale Data Vulnerabilities
      • Cross-Thread Return Address Predictions
      • GDS - Gather Data Sampling
      • Speculative Return Stack Overflow (SRSO)
      • Indirect Target Selection (ITS)
    • Reporting bugs
    • Security bugs
    • Bug hunting
    • Bisecting a bug
    • Tainted kernels
    • Ramoops oops/panic logger
    • Dynamic debug
    • Explaining the dreaded “No init found.” boot hang message
    • Documentation for Kdump - The kexec-based Crash Dumping Solution
    • Performance monitor support
    • Rules on how to access information in sysfs
    • Using the initial RAM disk (initrd)
    • Control Group v2
    • Control Groups version 1
    • Linux Serial Console
    • Linux Braille Console
    • Parport
    • RAID arrays
    • Kernel module signing facility
    • RapidIO Subsystem Guide
    • Linux Magic System Request Key Hacks
    • Unicode support
    • Software cursor for VGA
    • Kernel Support for miscellaneous (your favourite) Binary Formats v1.1
    • Mono(tm) Binary Kernel Support for Linux
    • Java(tm) Binary Kernel Support for Linux v1.03
    • Reliability, Availability and Serviceability
    • A block layer cache (bcache)
    • The Linux RapidIO Subsystem
    • ext4 General Information
    • The Android binderfs Filesystem
    • CIFS
    • The SGI XFS Filesystem
    • IBM’s Journaled File System (JFS) for Linux
    • Using UFS
    • Power Management
    • Thunderbolt
    • Linux Security Module Usage
    • Memory Management
    • Namespaces
    • Perf Events and tool security
    • ACPI Support
    • ATA over Ethernet (AoE)
    • btmrvl driver
    • Clearing WARN_ONCE
    • CPU load
    • How CPU topology info is exported via sysfs
    • Device Mapper
    • The EFI Boot Stub
    • gpio
    • Notes on the change from 16-bit UIDs to 32-bit UIDs
    • Linux support for random number generator in i8xx chipsets
    • I/O statistics fields
    • Reducing OS jitter due to per-cpu kthreads
    • Laptop Drivers
    • Auxiliary Display Support
    • Parallel port LCD/Keypad Panel support
    • LDM - Logical Disk Manager (Dynamic Disks)
    • Softlockup detector and hardlockup detector (aka nmi_watchdog)
    • Numa policy hit/miss statistics
    • Linux Plug and Play Documentation
    • Real Time Clock (RTC) Drivers for Linux
    • Video Mode Selection Support 2.13
    • WiMAX subsystem
    • Video Output Switcher Control
  • Kernel Build System
  • The Linux kernel firmware guide
  • The Linux kernel user-space API guide
  • Working with the kernel development community
  • Development tools for the kernel
  • How to write kernel documentation
  • Kernel Hacking Guides
  • Linux Tracing Technologies
  • Kernel Maintainer Handbook
  • fault-injection
  • Kernel Livepatching
  • The Linux driver implementer’s API guide
  • Core API Documentation
  • locking
  • Accounting
  • Block
  • cdrom
  • Integrated Drive Electronics (IDE)
  • Frame Buffer
  • fpga
  • Human Interface Devices (HID)
  • I2C/SMBus Subsystem
  • Industrial I/O
  • ISDN
  • InfiniBand
  • LEDs
  • Linux Media Subsystem Documentation
  • NetLabel
  • Linux Networking Documentation
  • pcmcia
  • Power Management
  • TCM Virtual Device
  • timers
  • Serial Peripheral Interface (SPI)
  • 1-Wire Subsystem
  • Linux Watchdog Support
  • Linux Virtualization Support
  • The Linux Input Documentation
  • Linux Hardware Monitoring
  • Linux GPU Driver Developer’s Guide
  • Security Documentation
  • Linux Sound Subsystem Documentation
  • Linux Kernel Crypto API
  • Filesystems in the Linux kernel
  • Linux Memory Management Documentation
  • BPF Documentation
  • USB support
  • Linux PCI Bus Subsystem
  • Assorted Miscellaneous Devices Documentation
  • Intel Many Integrated Core (MIC) architecture
  • Linux Scheduler
  • Assembler Annotations
  • ARM Architecture
  • ARM64 Architecture
  • IA-64 Architecture
  • m68k Architecture
  • MIPS-specific Documentation
  • Linux on the Nios II architecture
  • OpenRISC Architecture
  • PA-RISC Architecture
  • powerpc
  • RISC-V architecture
  • s390 Architecture
  • SuperH Interfaces Guide
  • Sparc Architecture
  • x86-specific Documentation
  • Xtensa Architecture
  • ext4 Data Structures and Algorithms
  • Translations
The Linux Kernel
  • Docs »
  • The Linux kernel user’s and administrator’s guide »
  • Hardware vulnerabilities
  • View page source

Hardware vulnerabilities¶

This section describes CPU vulnerabilities and provides an overview of the possible mitigations along with guidance for selecting mitigations if they are configurable at compile, boot or run time.

  • Spectre Side Channels
  • L1TF - L1 Terminal Fault
  • MDS - Microarchitectural Data Sampling
  • TAA - TSX Asynchronous Abort
  • iTLB multihit
  • SRBDS - Special Register Buffer Data Sampling
  • Core Scheduling
  • Processor MMIO Stale Data Vulnerabilities
  • Cross-Thread Return Address Predictions
  • GDS - Gather Data Sampling
  • Speculative Return Stack Overflow (SRSO)
  • Indirect Target Selection (ITS)
Next Previous

© Copyright The kernel development community.

Built with Sphinx using a theme provided by Read the Docs.