The latest development version of this page may be more current than this released 1.14.1 version.

CONFIG_ENABLE_EXTENDED_IBRS¶

Enable Extended IBRS

Type: bool

Help¶

This option will enable the Extended Indirect Branch Restricted Speculation ‘always on’ feature. This mitigates Indirect Branch Control vulnerabilities (aka Spectre V2).

Direct dependencies¶

USERSPACE && X86

(Includes any dependencies from if’s and menus.)

Defaults¶

“y” if !X86_NO_SPECTRE_V2 && USERSPACE && X86

Kconfig definition¶

At arch/x86/core/Kconfig:86

Included via Kconfig:10 → Kconfig.zephyr:29 → arch/Kconfig:15 → arch/x86/Kconfig:14

Menu path: (top menu) → X86 Architecture Options

config ENABLE_EXTENDED_IBRS
    bool
    prompt "Enable Extended IBRS" if USERSPACE && X86
    default "y" if !X86_NO_SPECTRE_V2 && USERSPACE && X86
    depends on USERSPACE && X86
    help
      This option will enable the Extended Indirect Branch Restricted
      Speculation 'always on' feature. This mitigates Indirect Branch
      Control vulnerabilities (aka Spectre V2).

(Definitions include propagated dependencies, including from if’s and menus.)