Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #192775

Re: Is Debian Linux protected against the Meltdown and Spectre security flaws?

Show all headers | View raw

Hi Stephen,

On Tue, Feb 20, 2018 at 10:09:52AM +0100, Stephan Seitz wrote:
> On Di, Feb 20, 2018 at 05:09:12 +0000, Andy Smith wrote:
> >CVE-2017-5753 is Spectre v1. There is no fix for Spectre v1 anywhere
> >yet, not even in Linux upstream.
> 
> Are you sure?

[…]

> >STATUS:  NOT VULNERABLE  (Mitigation: __user pointer sanitization)
> 
> Kernel is Linux 4.15.4 #1 SMP Sat Feb 17 23:19:56 CET 2018 x86_64, compiled
> myself with gcc 7.3 from testing.

Ah, I think you might be right that the known exploit for Spectre v1
is fixed now.

The commit message¹ speaks of infrastructure for future mitigations,
I think because further exploits are expected to be thought up for
this, but when they do I imagine they will have their own CVE
numbers (and names :)).

Cheers,
Andy

¹ https://lkml.org/lkml/2018/1/20/152

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Is Debian Linux protected against the Meltdown and Spectre security flaws? Turritopsis Dohrnii Teo En Ming <tdteoenming@gmail.com> - 2018-02-19 14:20 +0100
  Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 14:40 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Roberto C. Sánchez <roberto@debian.org> - 2018-02-19 15:30 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Andy Smith <andy@strugglers.net> - 2018-02-20 06:00 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Greg Wooledge <wooledg@eeg.ccf.org> - 2018-02-20 14:50 +0100
  Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Greg Wooledge <wooledg@eeg.ccf.org> - 2018-02-19 15:20 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 18:00 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Reco <recoverym4n@gmail.com> - 2018-02-19 18:10 +0100
        Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 18:50 +0100
          Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Reco <recoverym4n@gmail.com> - 2018-02-19 19:10 +0100
            Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 19:40 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 19:30 +0100
        Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 20:10 +0100
          Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 20:20 +0100
            Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-19 22:30 +0100
              Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Andy Smith <andy@strugglers.net> - 2018-02-20 06:10 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-20 09:30 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-20 11:10 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Fothergill <michael.fothergill@gmail.com> - 2018-02-20 16:00 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Stephan Seitz <stse+debian@fsing.rootsland.net> - 2018-02-20 10:20 +0100
                Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Andy Smith <andy@strugglers.net> - 2018-02-20 16:20 +0100
  Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Brad Rogers <brad@fineby.me.uk> - 2018-02-19 15:20 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-19 19:40 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Brad Rogers <brad@fineby.me.uk> - 2018-02-19 20:20 +0100
      Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Gene Heskett <gheskett@shentel.net> - 2018-02-19 21:30 +0100
        Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Greg Wooledge <wooledg@eeg.ccf.org> - 2018-02-19 21:50 +0100
          Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Michael Lange <klappnase@freenet.de> - 2018-02-20 00:20 +0100
          Re: Is Debian Linux protected against the Meltdown and Spectre security flaws? Gene Heskett <gheskett@shentel.net> - 2018-02-20 00:30 +0100
    Re: Is Debian Linux protected against the Meltdown and Spectre  security flaws? Vincent Lefevre <vincent@vinc17.net> - 2018-02-27 17:10 +0100

csiph-web