{"id":138553,"date":"2025-06-30T11:11:59","date_gmt":"2025-06-30T09:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ubuntu-budet-postavlyat-intel-compute-runtime-bez-zashhity-ot-spectre-snizhayushhej-proizvoditelnost-na-20"},"modified":"2025-06-30T11:11:59","modified_gmt":"2025-06-30T09:11:59","slug":"ubuntu-budet-postavlyat-intel-compute-runtime-bez-zashhity-ot-spectre-snizhayushhej-proizvoditelnost-na-20","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/ubuntu-budet-postavlyat-intel-compute-runtime-bez-zashhity-ot-spectre-snizhayushhej-proizvoditelnost-na-20","title":{"rendered":"Ubuntu will supply intel-compute-runtime without Spectre protection, reducing performance by 20%.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Ubuntu has decided to switch to supplying the intel-compute-runtime package by default, compiled with the NEO_DISABLE_MITIGATIONS flag that disables protection against Spectre class attacks. According to developers, this protection reduces the performance of the package by approximately 20%. <\/p>\n
The intel-compute-runtime package includes components necessary for using OpenCL and OneAPI Level Zero on Intel GPU systems. When building the libraries included in the package, the presence of the NEO_DISABLE_MITIGATIONS build flag disables the compiler options \u2018-mretpoline -mindirect-branch=thunk -mfunction-return=thunk -mindirect-branch-register\u2019, which provide additional protection against Spectre. These options do not affect the performance of OpenCL and GPU-side operations, but they reduce overhead when executing the code responsible for API operations. <\/p>\n
Engineers responsible for security at Intel and Canonical concluded during discussions that the protection against Spectre implemented at the Compute Runtime level is no longer necessary, as the required protection is already present at the kernel level. The existing Spectre protection in Compute Runtime is mainly of interest to those using cores without adequate protection, and its benefits do not outweigh the observed performance drop. Furthermore, the Intel releases of Intel Graphics Compute Runtime are compiled with the NEO_DISABLE_MITIGATIONS flag set by default, disabling protection. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"