Meltdown and Spectre Discussion Sticky

[linuxyogi]

I am using 18.04 using kernel.

4.14.0-16-generic #19-Ubuntu SMP Mon Jan 8 17:50:31 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

I am still getting "pti"

$ lscpu | grep pti
Flags:               fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc art arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid aperfmperf tsc_known_freq pni pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 sdbg fma cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic movbe popcnt aes xsave avx f16c rdrand lahf_lm abm 3dnowprefetch cpuid_fault invpcid_single pti intel_pt tpr_shadow vnmi flexpriority ept vpid fsgsbase tsc_adjust bmi1 avx2 smep bmi2 erms invpcid mpx rdseed adx smap clflushopt xsaveopt xsavec xgetbv1 xsaves dtherm arat pln pts hwp hwp_notify hwp_act_window hwp_epp

Any way out for me ?

[DuckHook]

I am still getting "pti"

You are supposed to get pti. That means you are patched!

[linuxyogi]

You are supposed to get pti. That means you are patched!

Thats a big relief. Thanks a lot.

BTW, I dont notice any slow down.

[h113331pp]

Hi, does Linux kernel 4.4 and 3.13 for Ubuntu 14.04 LTS 32-bit also got spectre&meltdown patches? I got two computers running 32-bit 14.04 with these kernels.

[onlineguy]

My 16.04 install was just updated to 4.13. As you probably know PCID is only supported starting in 4.14. I take it I would have to install a mainline kernel OR wait til 16.04.4 to make use of my CPU's PCID capability, is that correct?

[corradoventu]

So after last updates my Artful should be partially protected against meltdown

corrado@corrado-p5-art:~$ inxi -SCGx
System:    Host: corrado-p5-art Kernel: 4.13.0-25-generic x86_64 bits: 64 gcc: 7.2.0
           Desktop: Gnome 3.26.2 (Gtk 3.22.25-0ubuntu0.1) Distro: Ubuntu 17.10
CPU:       Dual core Intel Core i3-7100 (-HT-MCP-) arch: Skylake rev.9 cache: 3072 KB
           flags: (lm nx sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx) bmips: 15648
           clock speeds: max: 3900 MHz 1: 3900 MHz 2: 3900 MHz 3: 3900 MHz 4: 3900 MHz
Graphics:  Card: Intel HD Graphics 630 bus-ID: 00:02.0
           Display Server: x11 (X.Org 1.19.5 ) driver: i915 Resolution: 1920x1080@60.00hz
           OpenGL: renderer: Mesa DRI Intel HD Graphics 630 (Kaby Lake GT2)
           version: 4.5 Mesa 17.2.2 Direct Render: Yes
corrado@corrado-p5-art:~$ apt policy *microcode*
intel-microcode:
  Installed: 3.20180108.0~ubuntu17.10.1
  Candidate: 3.20180108.0~ubuntu17.10.1
corrado@corrado-p5-art:~$ apt policy firefox
firefox:
  Installed: 57.0.4+build1-0ubuntu0.17.10.1
  Candidate: 57.0.4+build1-0ubuntu0.17.10.1

but what about spectre?

[DuckHook]

…but what about spectre?

See my post #81.

[DuckHook]

…does Linux kernel 4.4 and 3.13 for Ubuntu 14.04 LTS 32-bit also got spectre&meltdown patches?

No patches for 32-bit yet. No further word either, that I am aware of.

I also have 32-bit machines. They are not exposed to the internet and I don't run anything other than really basic, proven server apps on them. That's a good strategy for remaining safe in the interim.

The Ubuntu devs are being forced to engage in a high-stakes game of whack-a-mole right now. I suspect that 32-bit support is not high on their priority list. You and I will just have to sit tight until they get around to it.

[DuckHook]

My 16.04 install was just updated to 4.13. As you probably know PCID is only supported starting in 4.14. I take it I would have to install a mainline kernel OR wait til 16.04.4 to make use of my CPU's PCID capability, is that correct?

Yes. Correct.

Careful about installing forward kernels. It tends to break things. Not always, but frequently enough to need care. Of course, if you are testing, then by all means go ahead.

[DuckHook]

…Am I safe?

No, unfortunately, you are not. You are running 32-bit Linux. Ubuntu has not patched that yet. No word on when they will either. See post #118 above.

How would I be able test if my computer isn't vulnerable? Thanks.

See post #97 above.