linux-kernel - Re: [BUG] x86 : i486 reporting to be vulnerable to Meltdown/Spectre_V1/Spectre

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Sat, 03 Feb 2018 07:37:18 +0000
From:   David Woodhouse <dwmw2@...radead.org>
To:     whiteheadm@....org,
        Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
        hughd@...gle.com, dave.hansen@...ux.intel.com, jikos@...nel.org,
        bp@...en8.de, linux@...ck-us.net,
        Kees Cook <keescook@...omium.org>, jamie@...ieiles.com,
        eduval@...zon.com, labbott@...hat.com, riel@...riel.com,
        Thomas Gleixner <tglx@...utronix.de>,
        linux-kernel@...r.kernel.org
Subject: Re: [BUG] x86 : i486 reporting to be vulnerable to
 Meltdown/Spectre_V1/Spectre_V2

On Fri, 2018-02-02 at 23:52 -0500, tedheadster wrote:
> I just tested the 4.15 kernel and it is reporting that my old i486
> (non-cpuid capable) cpu is vulnerable to all three issues: Meltdown,
> Spectre V1, and Spectre V2.
> 
> I find this to be _unlikely_.

This should be fixed in Linus' tree already by commit fec9434a1
("x86/pti: Do not enable PTI on CPUs which are not vulnerable to
Meltdown").

We'll make sure it ends up in the stable tree too, if it hasn't
already.
Download attachment "smime.p7s" of type "application/x-pkcs7-signature" (5213 bytes)