From 82f0387ca213f0f7b4362a7251c589c8af447af5 Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Thu, 1 Feb 2024 18:51:37 -0500
Subject: [PATCH] enable BTI for baseline kernel CFI

---
 static/releases.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/static/releases.html b/static/releases.html
index 1eac96a9a..43378d2c1 100644
--- a/static/releases.html
+++ b/static/releases.html
@@ -731,6 +731,7 @@ <h3><a href="#2024012600">2024012600</a></h3>
                     <ul>
                         <li>kernel (Pixel 6, Pixel 6 Pro, Pixel 6a, Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Tablet, Pixel Fold, Generic 5.10): update to latest GKI LTS branch revision including update to 5.10.209</li>
                         <li>kernel (Pixel 8, Pixel 8 Pro, Generic 5.15): update to latest GKI LTS branch revision</li>
+                        <li>kernel (Pixel 8, Pixel 8 Pro, Generic 5.15, Generic 6.1): enable kernel arm64 Branch Target Identification (BTI) kernel protection to provide baseline coarse-grained Control Flow Integrity (CFI) for indirect calls with fine-grained CFI disabled (BTI reuses the existing PAC instructions included in non-leaf functions so it only needs to add BTI instructions to leaf functions)</li>
                         <li>kernel (Generic 6.1): apply sysrq hardening changes</li>
                         <li>kernel (Generic 6.1): update to latest GKI LTS branch revision including update to 6.1.74</li>
                         <li>Vanadium: update to <a href="https://github.com/GrapheneOS/Vanadium/releases/tag/121.0.6167.101.2">version 121.0.6167.101.2</a></li>