The Linux 7.4 kernel development tree has integrated patches for AMD Zen 6 processors. These updates introduce adjustments to security mitigation mechanisms, specifically targeting the Branch Target Buffer (BTB) context isolation feature.
By leveraging hardware-level BTB context isolation, the system can now disable the computationally expensive SafeRET mitigation. This change aims to reduce performance overhead while maintaining security between user space, kernel space, and virtual machine environments.
The patch, submitted by AMD engineer Borislav Petkov, was merged into the x86/bugs branch on September 1, 2026. It also updates how the kernel reports security mitigation status to prevent incorrect Spectre v2 status reporting in builds without RETPOLINE.
Despite these improvements, the hardware-level isolation does not eliminate all speculative execution risks. Protection against attacks between user processes or virtual machines still requires existing Spectre v2 settings and Indirect Branch Predictor Barrier (IBPB) mechanisms.
