Meltdown and Spectre Discussion Sticky

[pqwoerituytrueiwoq]

the patch can be turned on/off via a boot parameter (not sure what it is yet)
also you can check /proc/cpuinfo for the cpu_insecure flag (i think this only appears for affected CPUs)

[corradoventu]

Being a problem of isolation between applications may wayland reduce the risk?

[rattskjelke]

Ubuntu's Meltdown/Spectre info page says there will be a patch for

• Ubuntu 16.04 LTS (Xenial) — Linux 4.4 (and 4.4 HWE)

A few weeks ago I did a fresh install of Xubuntu 16.04.3 LTS and the kernel was automatically updated to 4.10.0-42.
Does this mean there is no patch for the latest HWE kernel version?

[deadflowr]

Ubuntu's Meltdown/Spectre info page says there will be a patch for

• Ubuntu 16.04 LTS (Xenial) — Linux 4.4 (and 4.4 HWE)

A few weeks ago I did a fresh install of Xubuntu 16.04.3 LTS and the kernel was automatically updated to 4.10.0-42.
Does this mean there is no patch for the latest HWE kernel version?

Most likely because they'll be rolling everyone using the HWE stacks to the 4.13 kernel soon.
(This might even cause an expedited roll out.)
You were going to get the 4.13 eventually anyway, so...

[j3984]

MY laptop has the 2006 T5500 dual core Intel chip. Is this at risk???
also will INtel recall all chips that are at risk that have not been sold yet..??

[poorguy]

From everything I've read most Intel processors are at risk.

I really doubt that Intel will recall any processors.

Supposedly Intel is suppose to release a bug fix for some of the newer processors.

I have more faith in the Linux devs to come up with a solution than to trust what Intel will do if anything.

[#&thj^%]

Not just Intel>>>AMD and Arm are affected.
https://www.macrumors.com/2018/01/03...p-design-flaw/

https://www.reuters.com/article/us-c...-idUSKBN1ES1BO
Please Note there are no known events posted "Yet"
Relax have a cocktail enjoy life.
And avoid downloading apps from unknown sources.

[TheFu]

Yes. Every CPU made in the last 20+ yrs has the issue to some extent.
https://wiki.ubuntu.com/SecurityTeam...treAndMeltdown has more details.

What intel does won't be known until after all the lawsuits finish in 3-8 yrs. If anything at all, I expect a $10 check after all the legal fees are paid. Any CPUs over 5 yrs old aren't supported anymore, so none of those will be specifically addressed by anything Intel does do.

[poorguy]

I only mentioned Intel as that is what the OP ask about.

I agree with your way of relaxation 1fallen.

[grahammechanical]

A quote from the Insights Ubuntu Update Meltdown/spectre page

Furthermore, you can expect Ubuntu security updates for a number of other related packages, including CPU microcode, GCC and QEMU in the coming days.

To get the updated CPU microcode we will need the microcode driver activated

System settings>Software & Updates>Additional Drivers. There should be a radio button that can be ticked to install the microcode driver.

And just what does a microcode driver do?

https://wiki.debian.org/Microcode

Regards