Documentation/process/embargoed-hardware-issues.rst

3 Embargoed hardware issues
9 Hardware issues which result in security problems are a different category
13 Hardware issues like Meltdown, Spectre, L1TF etc. must be treated
16 hardware vendors and other parties. For some of the issues, software
25 The Linux kernel hardware security team is separate from the regular Linux
28 The team only handles developing fixes for embargoed hardware security
34 The team can be contacted by email at <hardware-security@kernel.org>. This
43   - PGP: https://www.kernel.org/static/files/hardware-security.asc
44   - S/MIME: https://www.kernel.org/static/files/hardware-security.crt
46 While hardware security issues are often handled by the affected hardware
48 identified a potential hardware flaw.
50 Hardware security officers
53 The current team of hardware security officers:
77 The Linux kernel hardware security team is not a formal body and therefore
87 keep hardware security issues under embargo for coordination between
88 different OS vendors, distributors, hardware vendors and other parties.
90 The Linux kernel community has successfully handled hardware security
94 The Linux kernel community has a dedicated hardware security team for
98 The hardware security team identifies the developers (domain experts) who
106 mailing-lists. In addition, the hardware security team will also exclude
109 hardware security team will inform the involved parties immediately. If you
111 immediately to the Hardware security officers.
118 face-to-face meetings are almost impossible to address hardware security
127 Disclosure starts by contacting the Linux kernel hardware security team by
129 a list of any known affected hardware. If your organization builds or
130 distributes the affected hardware, we encourage you to also consider what
131 other hardware could be affected.
133 The hardware security team will provide an incident-specific encrypted
137 The hardware security team will provide the disclosing party a list of
142 issue after initial contact. The hardware security team is supporting the
183 has been successfully used in developing mitigations for various hardware
225 While we understand that hardware security issues need coordinated embargo
237 Neither the hardware security team nor the initial response team assign
277 contact the hardware security team. The nominated ambassador has to