Hi, I could see that you are at version 4.9.92 without the support of retpoline [Linux 4.9.77]. However, I have created a port for version 4.9.74 which is available [here](https://github.com/HacKurx/public-sharing/blob/master/retpoline_for_unofficial_grsec-4.9.74.patch). ### My version is a port from "patch-4.9.76-77" without the following files : a/arch/x86/mm/kaiser.c a/arch/x86/mm/pgtable.c a/arch/x86/kernel/irq_32.c a/arch/x86/kernel/mcount_64.S a/arch/x86/kernel/cpu/bugs_64.c a/arch/x86/crypto/aesni-intel_asm.S a/arch/x86/crypto/camellia-aesni-avx2-asm_64.S a/arch/x86/crypto/camellia-aesni-avx-asm_64.S a/arch/x86/crypto/crc32c-pcl-intel-asm_64.S a/arch/x86/entry/entry_32.S a/arch/x86/entry/entry_64.S ### With the addition (BPF_JIT_ALWAYS_ON) : a/net/socket.c a/net/core/sysctl_net_core.c a/net/core/filter.c a/lib/test_bpf.c a/kernel/bpf/core.c a/init/Kconfig a/arch/x86/lib/cmdline.c a/arch/x86/include/asm/cmdline.h Retpoline is not a blocking point like PAX_UDEREF so the longer you wait, the harder it will be for you to catch up with its integration. I saw otherwise that you catch up the delay via the official patches, have you tried to do this as a [commit]( https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/log/?h=v4.9.103) for the blocking points? See [this](https://github.com/dapperlinux/dapper-secure-kernel-patchset/commit/ec87b2d9f44b5f4b6c0ea6b25e8ddd4f9c2a5a3d#commitcomment-29066113).