Hi, There're several indirect calls in inline assembly in vesafb driver (drivers/video/fbdev/vesafb.c), and these calls cannot be automatically changed to retpolines. It's in vesafb_pan_display(): 73 __asm__ __volatile__( 74 "call *(%%edi)" and in vesa_setpalette(): 113 __asm__ __volatile__( 114 "call *(%%esi)" Is there need to use CALL_NOSPEC ? Thanks, Alex