Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #6022
| From | piorunz <piorunz@gmx.com> |
|---|---|
| Newsgroups | linux.debian.security |
| Subject | Re: CVE-2017-5715 |
| Date | 2022-03-23 15:00 +0100 |
| Message-ID | <E49GN-3Fic-5@gated-at.bofh.it> (permalink) |
| References | <E06xP-1dVd-3@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On 12/03/2022 09:48, Georgi Naplatanov wrote:
> spectre-meltdown-checker script reports that my system is vulnerable to
> CVE-2017-5715. My CPU is Intel(R) Core(TM) i7-8700 CPU @ 3.20GHz
>
> Is this normal?
>
> In the past all checks from spectre-meltdown-checker were green (my
> system was not vulnerable).
Is your vulnerability shown as follows?
CVE-2017-5715 aka 'Spectre Variant 2, branch target injection'
* Mitigated according to the /sys interface: YES (Mitigation:
Retpolines, IBPB: conditional, IBRS_FW, STIBP: conditional, RSB filling)
* Mitigation 1
* Kernel is compiled with IBRS support: YES
* IBRS enabled and active: YES (for firmware code only)
* Kernel is compiled with IBPB support: YES
* IBPB enabled and active: YES
* Mitigation 2
* Kernel has branch predictor hardening (arm): NO
* Kernel compiled with retpoline option: YES
* Kernel supports RSB filling: YES
> STATUS: VULNERABLE (IBRS+IBPB or retpoline+IBPB+RSB filling, is
needed to mitigate the vulnerability)
--
With kindest regards, Piotr.
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org/
⠈⠳⣄⠀⠀⠀⠀
Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-12 10:50 +0100
Re: CVE-2017-5715 piorunz <piorunz@gmx.com> - 2022-03-23 15:00 +0100
Re: CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-23 15:50 +0100
Re: CVE-2017-5715 Leandro Cunha <leandrocunha016@gmail.com> - 2022-03-23 16:50 +0100
Re: CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-23 17:20 +0100
Re: CVE-2017-5715 piorunz <piorunz@gmx.com> - 2022-03-23 17:40 +0100
Re: CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-23 18:40 +0100
Re: CVE-2017-5715 Leandro Cunha <leandrocunha016@gmail.com> - 2022-03-23 21:50 +0100
Re: CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-23 22:20 +0100
Re: CVE-2017-5715 Salvatore Bonaccorso <carnil@debian.org> - 2022-03-23 22:40 +0100
Re: CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-24 09:00 +0100
Re: CVE-2017-5715 Leandro Cunha <leandrocunha016@gmail.com> - 2022-03-25 02:30 +0100
Re: CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-25 08:20 +0100
Re: CVE-2017-5715 Leandro Cunha <leandrocunha016@gmail.com> - 2022-03-25 18:30 +0100
Re: CVE-2017-5715 Georgi Naplatanov <gosho@oles.biz> - 2022-03-25 18:40 +0100
Re: CVE-2017-5715 Leandro Cunha <leandrocunha016@gmail.com> - 2022-03-25 19:00 +0100
Re: CVE-2017-5715 Salvatore Bonaccorso <carnil@debian.org> - 2022-03-30 07:10 +0200
Re: CVE-2017-5715 Sylvestre Ledru <sylvestre@debian.org> - 2022-03-30 09:50 +0200
Re: CVE-2017-5715 Holger Levsen <holger@layer-acht.org> - 2022-03-30 11:40 +0200
Re: CVE-2017-5715 Salvatore Bonaccorso <carnil@debian.org> - 2022-04-06 06:40 +0200
csiph-web