Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #61947 > unrolled thread

Bug#907581: linux-image-4.9.0-8-amd64: off-by-one bug in L1TF mitigation

Started byMarkus Schade <markus.schade@gmail.com>
First post2018-08-29 20:50 +0200
Last post2018-09-02 17:10 +0200
Articles 3 — 2 participants

Back to article view | Back to linux.debian.kernel


Contents

  Bug#907581: linux-image-4.9.0-8-amd64: off-by-one bug in L1TF mitigation Markus Schade <markus.schade@gmail.com> - 2018-08-29 20:50 +0200
    Bug#907581: linux-image-4.9.0-8-amd64: off-by-one bug in L1TF mitigation Markus Schade <markus.schade@gmail.com> - 2018-08-29 21:20 +0200
    Bug#907581: linux-image-4.9.0-8-amd64: off-by-one bug in L1TF mitigation Salvatore Bonaccorso <carnil@debian.org> - 2018-09-02 17:10 +0200

#61947 — Bug#907581: linux-image-4.9.0-8-amd64: off-by-one bug in L1TF mitigation

FromMarkus Schade <markus.schade@gmail.com>
Date2018-08-29 20:50 +0200
SubjectBug#907581: linux-image-4.9.0-8-amd64: off-by-one bug in L1TF mitigation
Message-ID<wsdHr-2Qm-1@gated-at.bofh.it>
Package: src:linux
Version: 4.9.110-3+deb9u4
Severity: important
Tags: patch

Dear Maintainer,

due to an off-by-one bug in the L1TF patch, the "rare" case of systems still vulnerable
is more frequent.

Originally this was reported in OpenSUSE, but I can confirm this is also true
with the latest Debian kernel.

Please cherry-pick the following upstream patch to resolve this issue:

https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=b0a182f875689647b014bc01d36b340217792852

Best regards,
Markus

[toc] | [next] | [standalone]


#61948

FromMarkus Schade <markus.schade@gmail.com>
Date2018-08-29 21:20 +0200
Message-ID<wseau-3fe-3@gated-at.bofh.it>
In reply to#61947
This issue is further addressed by:

https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?h=x86/urgent&id=cc51e5428ea54f575d49cfcede1d4cb3a72b4ec4

by increasing the memory limit for the mitigation on pretty much all
desktop, mobile and Xeon E3 systems since Nehalem.

Best regards,
Markus

[toc] | [prev] | [next] | [standalone]


#61969

FromSalvatore Bonaccorso <carnil@debian.org>
Date2018-09-02 17:10 +0200
Message-ID<wtCaJ-33B-1@gated-at.bofh.it>
In reply to#61947
Hi,

TTBOMK, the first one is pending for 4.9.125 and 4.18.6, so will be
included when we update to those stable updates (for stretch and in
unstable).

The second commit is not (yet) in a stable update queue.

Regards,
Salvatore

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.kernel


csiph-web