Add PATCH_MATCH[0] stanza to disable_fstack-clash-protection_fcf-protection.patch to only apply from v4 to v5.12 kernels. v5.13 kernels already disable both by default. But in jammy/kinetic v5.19+ kernels may need fcf-protection=branch as inherited from kernel config with CET IBT turned on.
This patch is needed in jammy+ nvidia packages, but is safe to apply everywhere.
Add PATCH_MATCH[0] stanza to disable_fstack-clash-protection_fcf-protection.patch to only apply from v4 to v5.12 kernels. v5.13 kernels already disable both by default. But in jammy/kinetic v5.19+ kernels may need fcf-protection=branch as inherited from kernel config with CET IBT turned on.
This patch is needed in jammy+ nvidia packages, but is safe to apply everywhere.