x86 hardware vulnerabilities · Maintained

Maintainers

• M Thomas Gleixner <tglx@kernel.org>
• M Borislav Petkov <bp@alien8.de>
• M Peter Zijlstra <peterz@infradead.org>
• M Josh Poimboeuf <jpoimboe@kernel.org>
• R Pawan Gupta <pawan.kumar.gupta@linux.intel.com>

Paths

• F Documentation/admin-guide/hw-vuln/
• F arch/x86/include/asm/nospec-branch.h
• F arch/x86/kernel/cpu/bugs.c
• F scripts/update-intel-ucode-defs.py

Last 30 days

Active reviewers (last 30 days)

• Jon Kohler <hidden>
  8 attestations (8 Tested-by) · last on 2026-06-23
• Nikolay Borisov <hidden>
  6 attestations (6 Reviewed-by) · last on 2026-06-23
• Dave Hansen <dave.hansen@linux.intel.com>
  3 attestations (3 Suggested-by) · last on 2026-06-23
• Sean Christopherson <seanjc@google.com>
  3 attestations (2 Acked-by, 1 Suggested-by) · last on 2026-06-23
• Borislav Petkov <bp@alien8.de>
  3 attestations (2 Acked-by, 1 Suggested-by) · last on 2026-06-23

Recent patches

Most-recent 30 patches in this subsystem on linux-doc (capped at 30), ordered by date desc.

• COOLING7d REVIEWED: 2 (0M) [PATCH v12 12/12] x86/vmscape: Add cmdline vmscape=on to override attack vector controls
  2026-06-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• COOLING7d REVIEWED: 2 (0M) [PATCH v12 11/12] x86/vmscape: Resolve conflict between attack-vectors and vmscape=force
  2026-06-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• COOLING7d REVIEWED: 2 (0M) [PATCH v12 10/12] x86/vmscape: Deploy BHB clearing mitigation
  2026-06-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• COOLING7d REVIEWED: 4 (3M) [PATCH v12 09/12] x86/vmscape: Use static_call() for predictor flush
  2026-06-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• COOLING7d REVIEWED: 2 (0M) [PATCH v12 05/12] x86/vmscape: Move mitigation selection to a switch()
  2026-06-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• COOLING7d REVIEWED: 4 (3M) [PATCH v12 04/12] x86/vmscape: Rename x86_ibpb_exit_to_user to x86_predictor_flush_exit_to_user
  2026-06-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• COOLING7d REVIEWED: 2 (0M) [PATCH v12 03/12] x86/bhi: Rename clear_bhb_loop() to clear_bhb_loop_nofence()
  2026-06-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• COOLING7d REVIEWED: 8 (8M) [PATCH v12 02/12] x86/bhi: Make clear_bhb_loop() effective on newer CPUs
  2026-06-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• COOLING7d REVIEWED: 10 (8M) [PATCH v12 01/12] x86/bhi: x86/vmscape: Move LFENCE out of clear_bhb_loop()
  2026-06-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE66d REVIEWED: 2 (0M) [PATCH v11 12/12] x86/vmscape: Add cmdline vmscape=on to override attack vector controls
  2026-04-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE66d REVIEWED: 2 (0M) [PATCH v11 11/12] x86/vmscape: Resolve conflict between attack-vectors and vmscape=force
  2026-04-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE66d REVIEWED: 2 (0M) [PATCH v11 10/12] x86/vmscape: Deploy BHB clearing mitigation
  2026-04-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE66d REVIEWED: 4 (3M) [PATCH v11 09/12] x86/vmscape: Use static_call() for predictor flush
  2026-04-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE66d REVIEWED: 2 (0M) [PATCH v11 05/12] x86/vmscape: Move mitigation selection to a switch()
  2026-04-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE66d REVIEWED: 4 (3M) [PATCH v11 04/12] x86/vmscape: Rename x86_ibpb_exit_to_user to x86_predictor_flush_exit_to_user
  2026-04-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE66d REVIEWED: 2 (0M) [PATCH v11 03/12] x86/bhi: Rename clear_bhb_loop() to clear_bhb_loop_nofence()
  2026-04-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE66d [PATCH v11 02/12] x86/bhi: Make clear_bhb_loop() effective on newer CPUs
  2026-04-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE66d REVIEWED: 10 (8M) [PATCH v11 01/12] x86/bhi: x86/vmscape: Move LFENCE out of clear_bhb_loop()
  2026-04-23 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE88d REVIEWED: 2 (0M) [PATCH v10 10/12] x86/vmscape: Deploy BHB clearing mitigation
  2026-04-14 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE88d REVIEWED: 1 (0M) [PATCH v10 09/12] x86/vmscape: Use static_call() for predictor flush
  2026-04-14 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE88d REVIEWED: 2 (0M) [PATCH v10 12/12] x86/vmscape: Add cmdline vmscape=on to override attack vector controls
  2026-04-14 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE88d REVIEWED: 2 (0M) [PATCH v10 11/12] x86/vmscape: Resolve conflict between attack-vectors and vmscape=force
  2026-04-14 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE88d REVIEWED: 2 (0M) [PATCH v10 05/12] x86/vmscape: Move mitigation selection to a switch()
  2026-04-14 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE88d REVIEWED: 4 (3M) [PATCH v10 04/12] x86/vmscape: Rename x86_ibpb_exit_to_user to x86_predictor_flush_exit_to_user
  2026-04-14 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE88d REVIEWED: 2 (0M) [PATCH v10 03/12] x86/bhi: Rename clear_bhb_loop() to clear_bhb_loop_nofence()
  2026-04-14 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE88d [PATCH v10 02/12] x86/bhi: Make clear_bhb_loop() effective on newer CPUs
  2026-04-14 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE88d REVIEWED: 2 (0M) [PATCH v10 01/12] x86/bhi: x86/vmscape: Move LFENCE out of clear_bhb_loop()
  2026-04-14 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE95d Re: [PATCH v9 07/10] x86/vmscape: Use static_call() for predictor flush
  2026-04-03 · Sean Christopherson <seanjc@google.com>
• STALE95d REVIEWED: 2 (0M) [PATCH v9 10/10] x86/vmscape: Add cmdline vmscape=on to override attack vector controls
  2026-04-03 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
• STALE95d REVIEWED: 2 (0M) [PATCH v9 09/10] x86/vmscape: Resolve conflict between attack-vectors and vmscape=force
  2026-04-03 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• STALE111d REVIEWED: 1 (0M) [PATCH v7 01/10] x86/bhi: x86/vmscape: Move LFENCE out of clear_bhb_loop()
  2026-03-19 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com> · 1 Reviewed-by
• STALE111d REVIEWED: 1 (0M) [PATCH v7 09/10] x86/vmscape: Fix conflicting attack-vector controls with =force
  2026-03-19 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com> · 1 Reviewed-by
• STALE111d REVIEWED: 1 (0M) [PATCH v7 10/10] x86/vmscape: Add cmdline vmscape=on to override attack vector controls
  2026-03-19 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com> · 1 Reviewed-by
• STALE103d REVIEWED: 1 (0M) [PATCH v8 01/10] x86/bhi: x86/vmscape: Move LFENCE out of clear_bhb_loop()
  2026-03-24 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com> · 1 Reviewed-by
• STALE103d REVIEWED: 1 (0M) [PATCH v8 03/10] x86/bhi: Rename clear_bhb_loop() to clear_bhb_loop_nofence()
  2026-03-24 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com> · 1 Reviewed-by
• STALE103d REVIEWED: 1 (0M) [PATCH v8 09/10] x86/vmscape: Resolve conflict between attack-vectors and vmscape=force
  2026-03-24 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com> · 1 Reviewed-by
• STALE103d REVIEWED: 1 (0M) [PATCH v8 10/10] x86/vmscape: Add cmdline vmscape=on to override attack vector controls
  2026-03-24 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com> · 1 Reviewed-by
• STALE95d REVIEWED: 2 (0M) [PATCH v9 01/10] x86/bhi: x86/vmscape: Move LFENCE out of clear_bhb_loop()
  2026-04-03 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com> · 1 Reviewed-by, 1 Tested-by
• STALE95d REVIEWED: 2 (0M) [PATCH v9 03/10] x86/bhi: Rename clear_bhb_loop() to clear_bhb_loop_nofence()
  2026-04-03 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com> · 1 Reviewed-by, 1 Tested-by
• STALE95d REVIEWED: 2 (0M) [PATCH v9 09/10] x86/vmscape: Resolve conflict between attack-vectors and vmscape=force
  2026-04-03 · Pawan Gupta <pawan.kumar.gupta@linux.intel.com> · 1 Reviewed-by, 1 Tested-by