News › security
By The Linux Camp News, October 22, 2026
The merged adaptation lets Linux use Zen 6's hardware context isolation instead of SafeRET for SRSO mitigation. Earlier-kernel backports and workload performance gains remain unconfirmed.
Linux's pull-request tracker confirmed on October 20, 2026 that the x86/bugs changes for 7.4-rc1 had entered Linus Torvalds's development tree. The batch includes Borislav Petkov's adaptation of Speculative Return Stack Overflow (SRSO) mitigation for AMD Zen 6. This establishes development-tree integration, not a final Linux 7.4 release. 3 2 1
The change replaces reliance on SafeRET with handling for a hardware isolation capability. Petkov explains that Zen 6's Branch Target Buffer (BTB) has per-context tagging, making the expensive SafeRET mitigation unnecessary. Phoronix describes the feature as BTB CTX isolation between contexts such as user/kernel and guest/host. The causal distinction matters: Linux detects and handles hardware separation that removes the need for this particular software mitigation, rather than simply dropping it to gain speed. 2 1
For Zen 6 operators, the intended benefit is avoiding SafeRET's cost through the kernel's mitigation selection, not through an operator disabling protections broadly. The supported scope is SRSO handling on Zen 6; this announcement provides no basis for extending that advice to other mitigations or processor generations. Reduced overhead is the maintainer's rationale, not a measured workload speedup: Phoronix discusses comparison benchmarks as future work. 2 1
As of source retrieval on October 22, 2026, backports to earlier stable kernels remained unresolved in the reporting. For an older distribution kernel, seek explicit confirmation that the adaptation is included rather than treating its base version as a verdict. That is a verification recommendation, not a claim that any distribution has shipped a backport. 1