Name
Straight-line Speculation
Also known as
SLS
Kind
Transient execution
CVE published
2022-03-11 CVE record
Advisories
AMD-SB-1026
The processor can transiently execute the instructions that come after an unconditional direct branch, and what they do can show in the cache. AMD updated mitigation G-5 of its white paper on managing speculation for it, and Linux has a build option that compiles the kernel with the compiler’s straight-line speculation hardening.

Affected processors

5 of the 5 microarchitectures listed are affected in all or some of their models.

What the sources say of each microarchitecture.
MicroarchitectureStatusDetailSource
ExcavatorSome models7th Gen A-Series APUs and Athlon X4amd.com
ZenSome models1st Gen EPYC (7001); Ryzen 2000 and Athlon 3000 mobileamd.com
Zen+Some modelsRyzen 2000 desktop; 2nd Gen Threadripper (2000)amd.com
Zen 2Some models2nd Gen EPYC (7002); Ryzen 3000 desktop and 4000; 3rd Gen Threadripper (3000)amd.com
Zen 3Some modelsRyzen 5000 mobileamd.com

Mitigations

  • Compiler: Mitigation G-5 of AMD's white paper on managing speculation, which AMD updated for this CVE. Source.
  • Kernel: Linux's MITIGATION_SLS option, off by default, builds the kernel with -mharden-sls=all. Source.

Sources

  1. AMD-SB-1026: AMD CPUs May Transiently Execute Beyond Unconditional Direct Branch
  2. Linux 7.3 arch/x86/Kconfig: MITIGATION_SLS
  3. Linux 7.3 arch/x86/Makefile: -mharden-sls=all