[SOLVED]how to install spectre patches | Arch Linux Community | Page 1

agile tusk Aug 15, 2023, 7:42 AM

#

during boot my system already complains about being vulnerable to Spectre/RETBleed, afaik there are some patches for this vulnerability. how do I install these patches?

flint yacht Aug 15, 2023, 7:42 AM

#

agile tusk during boot my system already complains about being vulnerable to Spectre/RETBle...

They are in kernel

cat /proc/cmdline

agile tusk Aug 15, 2023, 7:43 AM

#

flint yacht They are in kernel ``` cat /proc/cmdline ```

huh? why does it complain then

flint yacht Aug 15, 2023, 7:44 AM

#

agile tusk huh? why does it complain then

Can you post the output

#

cat /proc/cmdlie

agile tusk Aug 15, 2023, 7:44 AM

#

[sparky@hell ~]:3 cat /proc/cmdline
BOOT_IMAGE=/boot/vmlinuz-linux root=UUID=f318162c-d8e0-4087-a057-74557fb33987 rw

flint yacht Aug 15, 2023, 7:45 AM

#

agile tusk ``` [sparky@hell ~]:3 cat /proc/cmdline BOOT_IMAGE=/boot/vmlinuz-linux root=UUID...

lscpu | curl -F 'f:1=<-' ix.io

agile tusk Aug 15, 2023, 7:46 AM

#

http://ix.io/4Dwl

flint yacht Aug 15, 2023, 7:56 AM

#

agile tusk http://ix.io/4Dwl

You have my condolences

#

Some migrations require microcode and disabling SMT

#

And they will severely cripple the performance

agile tusk Aug 15, 2023, 7:58 AM

#

flint yacht And they will severely cripple the performance

how serious is this vulnerability

flint yacht Aug 15, 2023, 7:59 AM

#

agile tusk how serious is this vulnerability

What is machine is for?

agile tusk Aug 15, 2023, 7:59 AM

#

flint yacht What is machine is for?

mainly for daily usage but it still seems scary

#

if they have done this much research on this thing it should have a reason

flint yacht Aug 15, 2023, 8:08 AM

#

agile tusk mainly for daily usage but it still seems scary

https://docs.kernel.org/admin-guide/hw-vuln/index.html

flint yacht Aug 15, 2023, 8:36 AM

#

agile tusk if they have done this much research on this thing it should have a reason

Cloud providers are the primary target for this type of exploitation of such hardware vulnerabilities.

#

Mmio stale data require microcode updates

agile tusk Aug 15, 2023, 8:36 AM

#

I see

#

So I have microcode installed

#

This time I get this during boot

#

Should I be worried

flint yacht Aug 15, 2023, 8:37 AM

#

agile tusk This time I get this during boot

Once the system is up and running, please post lscpu again.

#

lscpu | curl -F 'f:1=<-' ix.io

#

No microcode migration of Mmio stale data for you Skylake CPU 6_43h it seems

#

https://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html

agile tusk Aug 15, 2023, 8:42 AM

#

I shut it down again, it's the same, I didn't do anything other than posting it

agile tusk Aug 15, 2023, 8:43 AM

#

flint yacht No microcode migration of `Mmio stale data` for you Skylake CPU 6_43h it seems

Should I be worried about it?

#

Its mainly abused in servers

flint yacht Aug 15, 2023, 8:44 AM

#

agile tusk Should I be worried about it?

If descriptions match your system https://docs.kernel.org/admin-guide/hw-vuln/processor_mmio_stale_data.html

#

pertain to potential information disclosure via local access

#

https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/processor-mmio-stale-data-vulnerabilities.html

agile tusk Aug 15, 2023, 9:57 AM

#

flint yacht If descriptions match your system https://docs.kernel.org/admin-guide/hw-vuln/pr...

thanks

snow orchidBOT Aug 15, 2023, 9:57 AM

#

Senatvs Popvlvsqve Romanvs received a thank you cookie!

agile tusk Aug 15, 2023, 9:58 AM

#

[SOLVED]how to install spectre patches

flint yacht Aug 15, 2023, 6:32 PM

#

CPU is torture

#

Use brain cells

#

Ich meinte es ernst

#[SOLVED]how to install spectre patches