CONFIG_ENABLE_EXTENDED_IBRS

Enable Extended IBRS

Type: bool

Help

This option will enable the Extended Indirect Branch Restricted Speculation ‘always on’ feature. This mitigates Indirect Branch Control vulnerabilities (aka Spectre V2).

Direct dependencies

USERSPACE && X86

(Includes any dependencies from if’s and menus.)

Defaults

Kconfig definition

At arch/x86/core/Kconfig:86

Included via Kconfig:10Kconfig.zephyr:29arch/Kconfig:15arch/x86/Kconfig:14

Menu path: (top menu) → X86 Architecture Options

config ENABLE_EXTENDED_IBRS
    bool
    prompt "Enable Extended IBRS" if USERSPACE && X86
    default "y" if !X86_NO_SPECTRE_V2 && USERSPACE && X86
    depends on USERSPACE && X86
    help
      This option will enable the Extended Indirect Branch Restricted
      Speculation 'always on' feature. This mitigates Indirect Branch
      Control vulnerabilities (aka Spectre V2).

(Definitions include propagated dependencies, including from if’s and menus.)