Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #6025

Re: CVE-2017-5715

From Georgi Naplatanov <gosho@oles.biz>
Newsgroups linux.debian.security
Subject Re: CVE-2017-5715
Date 2022-03-23 17:20 +0100
Message-ID <E4bSh-3GLN-1@gated-at.bofh.it> (permalink)
References <E06xP-1dVd-3@gated-at.bofh.it> <E49GN-3Fic-5@gated-at.bofh.it> <E4atb-3FND-7@gated-at.bofh.it> <E4bpf-3GmO-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On 3/23/22 17:41, Leandro Cunha wrote:
> Hi,
> 
> On Wed, Mar 23, 2022 at 11:47 AM Georgi Naplatanov <gosho@oles.biz> wrote:
>>
>> On 3/23/22 15:58, piorunz wrote:
>>> On 12/03/2022 09:48, Georgi Naplatanov wrote:
>>>
>>>> spectre-meltdown-checker script reports that my system is vulnerable to
>>>> CVE-2017-5715. My CPU is Intel(R) Core(TM) i7-8700 CPU @ 3.20GHz
>>>>
>>>> Is this normal?
>>>>
>>>> In the past all checks from spectre-meltdown-checker were green (my
>>>> system was not vulnerable).
>>>
>>> Is your vulnerability  shown as follows?
>>>
>>> CVE-2017-5715 aka 'Spectre Variant 2, branch target injection'
>>> * Mitigated according to the /sys interface:  YES  (Mitigation:
>>> Retpolines, IBPB: conditional, IBRS_FW, STIBP: conditional, RSB filling)
>>> * Mitigation 1
>>>   * Kernel is compiled with IBRS support:  YES
>>>     * IBRS enabled and active:  YES  (for firmware code only)
>>>   * Kernel is compiled with IBPB support:  YES
>>>     * IBPB enabled and active:  YES
>>> * Mitigation 2
>>>   * Kernel has branch predictor hardening (arm):  NO
>>>   * Kernel compiled with retpoline option:  YES
>>>   * Kernel supports RSB filling:  YES
>>>> STATUS:  VULNERABLE  (IBRS+IBPB or retpoline+IBPB+RSB filling, is
>>> needed to mitigate the vulnerability)
>>>
>>
>> Yes, it seems the same but to avoid possible confusion/mistake I'm
>> pasting the output below:
>>
>>
>> CVE-2017-5715 aka 'Spectre Variant 2, branch target injection'
>> * Mitigated according to the /sys interface:  YES  (Mitigation:
>> Retpolines, IBPB: conditional, IBRS_FW, STIBP: conditional, RSB filling)
>> * Mitigation 1
>>   * Kernel is compiled with IBRS support:  YES
>>     * IBRS enabled and active:  YES  (for firmware code only)
>>   * Kernel is compiled with IBPB support:  YES
>>     * IBPB enabled and active:  YES
>> * Mitigation 2
>>   * Kernel has branch predictor hardening (arm):  NO
>>   * Kernel compiled with retpoline option:  YES
>>   * Kernel supports RSB filling:  YES
>>> STATUS:  VULNERABLE  (IBRS+IBPB or retpoline+IBPB+RSB filling, is
>> needed to mitigate the vulnerability)
>>
> 
> Please, take into consideration what is in the link and you can consult through
> it about CVE: https://security-tracker.debian.org/tracker/CVE-2017-5715
> 

Hey Leandro,

I'm using kernel 5.10.103-1

and intel-microcode 3.20210608.2

but spectre-meltdown-checker reports that my system is vulnerable.

Could you clarify what you meant?

Kind regards
Georgi

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-12 10:50 +0100
  Re: CVE-2017-5715 piorunz <piorunz@gmx.com> - 2022-03-23 15:00 +0100
    Re: CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-23 15:50 +0100
      Re: CVE-2017-5715 Leandro Cunha <leandrocunha016@gmail.com> - 2022-03-23 16:50 +0100
        Re: CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-23 17:20 +0100
        Re: CVE-2017-5715 piorunz <piorunz@gmx.com> - 2022-03-23 17:40 +0100
          Re: CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-23 18:40 +0100
            Re: CVE-2017-5715 Leandro Cunha <leandrocunha016@gmail.com> - 2022-03-23 21:50 +0100
              Re: CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-23 22:20 +0100
                Re: CVE-2017-5715 Salvatore Bonaccorso <carnil@debian.org> - 2022-03-23 22:40 +0100
                Re: CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-24 09:00 +0100
                Re: CVE-2017-5715 Leandro Cunha <leandrocunha016@gmail.com> - 2022-03-25 02:30 +0100
                Re: CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-25 08:20 +0100
                Re: CVE-2017-5715 Leandro Cunha <leandrocunha016@gmail.com> - 2022-03-25 18:30 +0100
                Re: CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-25 18:40 +0100
                Re: CVE-2017-5715 Leandro Cunha <leandrocunha016@gmail.com> - 2022-03-25 19:00 +0100
                Re: CVE-2017-5715 Salvatore Bonaccorso <carnil@debian.org> - 2022-03-30 07:10 +0200
                Re: CVE-2017-5715 Sylvestre Ledru <sylvestre@debian.org> - 2022-03-30 09:50 +0200
                Re: CVE-2017-5715 Holger Levsen <holger@layer-acht.org> - 2022-03-30 11:40 +0200
                Re: CVE-2017-5715 Salvatore Bonaccorso <carnil@debian.org> - 2022-04-06 06:40 +0200

csiph-web