Linux Kernel 7.1.7 has been released, featuring a critical security update that addresses the Safe RET Interrupt Injection vulnerability affecting AMD Zen processors from Zen 1 to Zen 4. The patch, authored by AMD's Borislav Petkov, prevents local attackers from bypassing Spectre v2 mitigations by injecting timed interrupts during the return stack protection sequence. This update is necessary for systems with untrusted local users, as it protects against potential memory leaks, despite the modest leak rate of 5.47 bytes per second. The release is solely focused on this security enhancement, making it a low-risk upgrade for administrators managing AMD-based infrastructure

Linux Kernel 7.1.7 Update: Critical AMD Zen Safe RET Vulnerability Patch Released

Linux Kernel 7.1.7 is now available, shipping a critical security update that addresses the Safe RET Interrupt Injection vulnerability on AMD Zen 1 through Zen 4 processors. The patch, authored by AMD's Borislav Petkov, hardens the kernel against local attackers who could previously bypass Spectre v2 mitigations by injecting timed interrupts into the return stack protection sequence. While the proof-of-concept leak rate is modest at roughly 5.47 bytes per second, the fix is essential for systems requiring strict isolation between untrusted local users. The release includes only this security modification, making it a low-risk upgrade for administrators managing AMD-based server and desktop infrastructure.

Linux Kernel 7.1.7 Update: Critical AMD Zen Safe RET Vulnerability Patch Released @ Linux Compatible