3 ms·
At least AMD recommends you don't need the patch: >"Based on the difficulty to exploit the vulnerability, AMD and our ecosystem partners currently recommend us
by nonbel 8y ago
At least AMD recommends you don't need the patch:
>"Based on the difficulty to exploit the vulnerability, AMD and our ecosystem partners currently recommend using the default setting that maintains support for memory disambiguation.
We have not identified any AMD x86 products susceptible to the Variant 3a vulnerability in our analysis to-date."
https://www.amd.com/en/corporate/security-updates https://www.amd.com/en/corporate/security-updates
I couldn't (quickly) find a similar comment from intel.
- my123 8y agoIn the Linux kernel, the mitigation is applied for sandboxed processes, which makes sense. Note that no microcode updates are needed for AMD, while they're needed for Intel. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b78ce4a34b761c7fe13520de822984019ff1a8f https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...