Additional official distribution-config evidence for this existing
report:

I independently reached the same configuration question while comparing
current x86_64 distribution kernel configs. I am adding the evidence
here instead of opening a duplicate bug.

The following official Ubuntu release configurations all contain:

  # CONFIG_MITIGATION_GDS is not set

Observed releases:

* Ubuntu 24.04 Noble HWE, 6.17.0-35-generic
* Ubuntu 25.10 Questing, 6.17.0-40-generic
* Ubuntu 26.04 Resolute, 7.0.0-27-generic

The current Resolute configuration therefore shows that the setting
persists on the 7.0 kernel line rather than being limited to one older
HWE build.

In a dependency-aware comparison, all 12 independent current x86_64 peer
configuration sources with a known value enable CONFIG_MITIGATION_GDS.
Ubuntu/Mint, Debian/Kali, and Alma/Rocky were each collapsed to one vote
where they share an effective configuration source, so related
distributions were not allowed to inflate the majority.

One symbol-history detail may be useful when reviewing the policy. The
older CONFIG_MITIGATION_GDS_FORCE=n only avoided force-disabling AVX on
systems without suitable microcode. The newer CONFIG_MITIGATION_GDS=n is
the top-level mitigation switch itself. Linux v7.0 describes the latter
as a default-y option that enables mitigation for Gather Data Sampling:

https://github.com/torvalds/linux/blob/v7.0/arch/x86/Kconfig#L2566-L2574

This comment does not add a new hardware reproduction; the original
report already contains stronger machine-level evidence, including the
result with gather_data_sampling=force. It only adds release
persistence, cross-distribution context, and the distinction between the
old FORCE option and the current top-level option.

Could the Ubuntu kernel team confirm whether CONFIG_MITIGATION_GDS=n on
the current Resolute kernel is intentional, and whether the older AVX
compatibility rationale is intended to apply to this newer top-level
switch?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2154728

Title:
  GDS mitigation not enabled in Ubuntu kernel

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2154728/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to