Skip to content
June 25, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
  • Home
  • News
  • Technology
  • Linus Torvalds said Intel Patches ‘Complete and Utter Garbage’
  • Technology

Linus Torvalds said Intel Patches ‘Complete and Utter Garbage’

Do Son January 22, 2018 2 minutes read
CPU security patch
Add as a preferred
source on Google

Intel submitted a patch to the kernel to fix the Meltdown and Specter vulnerabilities, but patches related to Intel CPU bugs were ruthlessly attacked by Linus Torvalds. The Linux father, saying the patch was thoroughly rubbish. Patch will affect the performance, so Intel does not want to enable by default, because it will make the benchmark results appear to be very bad, so Intel’s approach is to choose when starting.

Linus Torvalds said:

“BULLSHIT.

Have you _looked_ at the patches you are talking about? You should
have – several of them bear your name.

The patches do things like add the garbage MSR writes to the kernel
entry/exit points. That’s insane. That says “we’re trying to protect
the kernel”. We already have retpoline there, with less overhead.

So somebody isn’t telling the truth here. Somebody is pushing complete
garbage for unclear reasons. Sorry for having to point that out.

If this was about flushing the BTB at actual context switches between
different users, I’d believe you. But that’s not at all what the
patches do.

As it is, the patches are COMPLETE AND UTTER GARBAGE.

They do literally insane things. They do things that do not make
sense. That makes all your arguments questionable and suspicious. The
patches do things that are not sane.

WHAT THE F*CK IS GOING ON?

And that’s actually ignoring the much _worse_ issue, namely that the
whole hardware interface is literally mis-designed by morons.

It’s mis-designed for two major reasons:

– the “the interface implies Intel will never fix it” reason.

See the difference between IBRS_ALL and RDCL_NO. One implies Intel
will fix something. The other does not.

Do you really think that is acceptable?

– the “there is no performance indicator”.

The whole point of having cpuid and flags from the
microarchitecture is that we can use those to make decisions.

But since we already know that the IBRS overhead is <i>huge</i> on
existing hardware, all those hardware capability bits are just
complete and utter garbage. Nobody sane will use them, since the cost
is too damn high. So you end up having to look at “which CPU stepping
is this” anyway.

I think we need something better than this garbage.”

Source: lkml

Related coverage

  • Double the RAM, Half the Stress: Raspberry Pi 4’s Secret Design Overhaul to Combat the 2026 Memory Crisis
  • Structured Expiration: Microsoft Enforces Comprehensive Lifecycle Management for OneDrive
  • The $41 Billion Golden Ticket: SoftBank Seals Historic OpenAI Stake
  • The Ad Era Begins: OpenAI Launches $8 ChatGPT Go with Sponsored Answers
  • Bank of China apply for Blockchain expansion patent

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee Logo Buy Me a Coffee PayPal
Crypto QR Code
USDT (TRC20):
TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm
USDT (ERC20):
0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce

Share this article:

Facebook Post LinkedIn Telegram
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: Linus Torvalds

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🚨 Active Exploits in the Wild

  • CVE-2026-34908CVSS 10.0
    A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi...
  • CVE-2026-34909CVSS 10.0
    A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS...
  • CVE-2026-34910CVSS 10.0
    A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi...
  • CVE-2025-67038CVSS 9.8
    An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write...
  • CVE-2024-23692CVSS 9.8
    Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This...
  • CVE-2026-20230CVSS 8.6
    A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified...
  • CVE-2026-48907
    A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated...
  • CVE-2026-20253CVSS 9.8
    In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or...
  • CVE-2026-4020CVSS 7.5
    The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and...
  • CVE-2026-20182CVSS 10.0
    May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and...
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-55454CVSS 9.9
    Appsmith is a platform to build admin panels, internal tools, and dashboards....
  • CVE-2026-55570CVSS 9.0
    SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, it...
  • CVE-2026-50551CVSS 9.9
    SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan...
  • CVE-2026-54158CVSS 9.9
    SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the...
  • CVE-2026-52813CVSS 10.0
    Gogs is an open source self-hosted Git service. Prior to 0.14.3, organization...
  • CVE-2026-52806CVSS 9.9
    Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs...
  • CVE-2026-45689CVSS 9.1
    Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0,...
  • CVE-2026-45688CVSS 9.1
    Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.0,...
  • CVE-2026-54067CVSS 9.9
    SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, CSS...
  • CVE-2026-53943CVSS 9.6
    Ghost is a Node.js content management system. From until 6.37.0, when Ghost...
Powered by CVE WATCHTOWER

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.