[SRU Jammy] UBUNTU: [Config]: disable CONFIG_GDS_FORCE_MITIGATION

Thadeu Lima de Souza Cascardo cascardo at canonical.com
Fri Aug 11 14:38:14 UTC 2023


BugLink: https://bugs.launchpad.net/bugs/2031093

That option will disable AVX on systems where microcode mitigation has not
been provided. Though it can be flipeed by a boot option, it has been shown
to break some versions of gnutls, which are used by apt or git when dealing
with https.

Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo at canonical.com>
---
 debian.master/config/annotations | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/debian.master/config/annotations b/debian.master/config/annotations
index 088c69e5fa6c..7cabd54998d7 100644
--- a/debian.master/config/annotations
+++ b/debian.master/config/annotations
@@ -4816,7 +4816,7 @@ CONFIG_GART_IOMMU                               policy<{'amd64': 'y'}>
 CONFIG_GCC_VERSION                              policy<{'amd64': '110300', 'arm64': '110300', 'armhf': '110300', 'ppc64el': '110300', 's390x': '110300'}>
 CONFIG_GCOV_KERNEL                              policy<{'amd64': 'n', 'arm64': 'n', 'armhf': 'n', 'ppc64el': 'n', 's390x': 'n'}>
 CONFIG_GDB_SCRIPTS                              policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 's390x': 'y'}>
-CONFIG_GDS_FORCE_MITIGATION                     policy<{'amd64': 'y'}>
+CONFIG_GDS_FORCE_MITIGATION                     policy<{'amd64': 'n'}>
 CONFIG_GEMINI_ETHERNET                          policy<{'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm'}>
 CONFIG_GENERIC_ADC_BATTERY                      policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm'}>
 CONFIG_GENERIC_ADC_THERMAL                      policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'ppc64el': 'm'}>
-- 
2.34.1




More information about the kernel-team mailing list