3 ms·
> that render those systems immune from both exploits (referred to as “Spectre” and “Meltdown”) The language used seems to imply that they have patched all thr
by chrononaut 9y ago
> that render those systems immune from both exploits (referred to as “Spectre” and “Meltdown”)
The language used seems to imply that they have patched all three identified vulnerabilities.
Is it possible that if this update is applied to a system running an unpatched Linux kernel on an Intel CPU that the system is no longer vulnerable to Meltdown?
Or does this microcode update complement work done by the kernel developers implementing KPTI as well as by the browser developers mitigating some portion of Spectre?
(My initial take is that the efforts by CPU manufacturers and OS/Software developers are orthogonal to provide better coverage to affected parties, such as those on CPUs where no update exists yet)
- space_fountain 9y agoI'd also be interested in an answer here. Right now it seems like this might even just add support for OS vendors and software developers to mitigate this down the road by selectively disabling pipelining features in their code or at least that's what I'm reading seems to imply.
- gcbirzan 9y agohttps://newsroom.intel.com/wp-content/uploads/sites/11/2018/01/Intel-Analysis-of-Speculative-Execution-Side-Channels.pdf https://newsroom.intel.com/wp-content/uploads/sites/11/2018/... - basically, you need software updates for variant 1 and 3, and both software and microcode update for 2 for certain CPUs. Bullshit doesn't even begin to describe that sentence...