Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #192753
| From | Stephan Seitz <stse+debian@fsing.rootsland.net> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? |
| Date | 2018-02-20 10:20 +0100 |
| Message-ID | <vlcfD-764-11@gated-at.bofh.it> (permalink) |
| References | (3 earlier) <vkYmm-6zz-5@gated-at.bofh.it> <vkYZ4-72v-11@gated-at.bofh.it> <vkZ8K-75Q-15@gated-at.bofh.it> <vl1ay-8oh-15@gated-at.bofh.it> <vl8lI-4DR-5@gated-at.bofh.it> |
| Organization | Minas Tirith, Gondor |
[Multipart message — attachments visible in raw view] - view raw
On Di, Feb 20, 2018 at 05:09:12 +0000, Andy Smith wrote: >CVE-2017-5753 is Spectre v1. There is no fix for Spectre v1 anywhere >yet, not even in Linux upstream. Are you sure? CVE-2017-5753 [bounds check bypass] aka 'Spectre Variant 1' * Mitigated according to the /sys interface: YES (kernel confirms that the mitigation is active) * Kernel has array_index_mask_nospec: YES (1 occurence(s) found of 64 bits array_index_mask_nospec()) * Checking count of LFENCE instructions following a jump in kernel: NO (only 3 jump-then-lfence instructions found, should be >= 30 (heuristic)) > STATUS: NOT VULNERABLE (Mitigation: __user pointer sanitization) Kernel is Linux 4.15.4 #1 SMP Sat Feb 17 23:19:56 CET 2018 x86_64, compiled myself with gcc 7.3 from testing. According to spectre-meltdown-checker all three vulnerabilities are mitigated. Shade and sweet water! Stephan -- | Public Keys: http://fsing.rootsland.net/~stse/keys.html |
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Is Debian Linux protected against the Meltdown and Spectre security flaws? Turritopsis Dohrnii Teo En Ming <tdteoenming@gmail.com> - 2018-02-19 14:20 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 14:40 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Roberto C. Sánchez <roberto@debian.org> - 2018-02-19 15:30 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Andy Smith <andy@strugglers.net> - 2018-02-20 06:00 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Greg Wooledge <wooledg@eeg.ccf.org> - 2018-02-20 14:50 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Greg Wooledge <wooledg@eeg.ccf.org> - 2018-02-19 15:20 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 18:00 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Reco <recoverym4n@gmail.com> - 2018-02-19 18:10 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 18:50 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Reco <recoverym4n@gmail.com> - 2018-02-19 19:10 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 19:40 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 19:30 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 20:10 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 20:20 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 22:30 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Andy Smith <andy@strugglers.net> - 2018-02-20 06:10 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-20 09:30 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-20 11:10 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-20 16:00 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Stephan Seitz <stse+debian@fsing.rootsland.net> - 2018-02-20 10:20 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Andy Smith <andy@strugglers.net> - 2018-02-20 16:20 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Brad Rogers <brad@fineby.me.uk> - 2018-02-19 15:20 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 19:40 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Brad Rogers <brad@fineby.me.uk> - 2018-02-19 20:20 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Gene Heskett <gheskett@shentel.net> - 2018-02-19 21:30 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Greg Wooledge <wooledg@eeg.ccf.org> - 2018-02-19 21:50 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-20 00:20 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Gene Heskett <gheskett@shentel.net> - 2018-02-20 00:30 +0100
Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Vincent Lefevre <vincent@vinc17.net> - 2018-02-27 17:10 +0100
csiph-web