CONFIG_ENABLE_EXTENDED_IBRS

Enable Extended IBRS

Type: bool

Help

This option will enable the Extended Indirect Branch Restricted Speculation ‘always on’ feature. This mitigates Indirect Branch Control vulnerabilities (aka Spectre V2).

Direct dependencies

USERSPACE && !X86_LONGMODE && X86

(Includes any dependencies from ifs and menus.)

Default

Kconfig definition

At arch/x86/core/Kconfig.ia32:74

Included via Kconfig:10Kconfig.zephyr:34arch/Kconfig:15arch/x86/Kconfig:159

Menu path: (Top) → X86 Architecture Options

config ENABLE_EXTENDED_IBRS
    bool "Enable Extended IBRS"
    default y if !X86_NO_SPECTRE_V2
    depends on USERSPACE && !X86_LONGMODE && X86
    help
      This option will enable the Extended Indirect Branch Restricted
      Speculation 'always on' feature. This mitigates Indirect Branch
      Control vulnerabilities (aka Spectre V2).

(The ‘depends on’ condition includes propagated dependencies from ifs and menus.)