Documentation/process/embargoed-hardware-issues.rst

3 Embargoed hardware issues
9 Hardware issues which result in security problems are a different category
13 Hardware issues like Meltdown, Spectre, L1TF etc. must be treated
16 silicon vendors, hardware integrators, and other parties. For some of the
25 The Linux kernel hardware security team is separate from the regular Linux
28 The team only handles developing fixes for embargoed hardware security
34 The team can be contacted by email at <hardware-security@kernel.org>. This
43   - PGP: https://www.kernel.org/static/files/hardware-security.asc
44   - S/MIME: https://www.kernel.org/static/files/hardware-security.crt
46 While hardware security issues are often handled by the affected silicon
48 identified a potential hardware flaw.
50 Hardware security officers
53 The current team of hardware security officers:
77 The Linux kernel hardware security team is not a formal body and therefore
87 keep hardware security issues under embargo for coordination between
90 The Linux kernel community has successfully handled hardware security
94 The Linux kernel community has a dedicated hardware security team for
98 The hardware security team identifies the developers (domain experts) who
106 mailing lists. In addition, the hardware security team will also exclude
109 hardware security team will inform the involved parties immediately. If you
111 immediately to the Hardware security officers.
118 face-to-face meetings are almost impossible to address hardware security
127 Disclosure starts by emailing the Linux kernel hardware security team per
130 your organization builds or distributes the affected hardware, we encourage
131 you to also consider what other hardware could be affected.  The disclosing
135 The hardware security team will provide an incident-specific encrypted
139 The hardware security team will provide the disclosing party a list of
144 issue after initial contact. The hardware security team is supporting the
185 has been successfully used to develop mitigations for various hardware
263 While we understand that hardware security issues need coordinated embargo
275 Neither the hardware security team nor the initial response team assign
315 contact the hardware security team. The nominated ambassador has to