On 27/04/18 20:20, Klaus Ethgen wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Hi,
Am Fr den 27. Apr 2018 um 6:42 schrieb Nikos Chantziaras:
On 26/04/18 14:42, Mick wrote:
Hmm ... why is my Intel system missing 'IBPB' & 'IBRS_FW' ?
$ grep . /sys/devices/system/cpu/vulnerabilities/*
/sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI
/sys/devices/system/cpu/vulnerabilities/spectre_v1:Mitigation: __user pointer
sanitization
/sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Full generic
retpoline
I did install and compile 4.15.18, the last version from branch 4.15.
Unfortunatelly I just get the following:
~> uname -a
Linux tha 4.15.18-gentoo #2 Fri Apr 27 13:33:03 CET 2018 i686 Intel(R)
Pentium(R) M processor 1.86GHz GenuineIntel GNU/Linux
~> grep . /sys/devices/system/cpu/vulnerabilities/*
/sys/devices/system/cpu/vulnerabilities/meltdown:Vulnerable
/sys/devices/system/cpu/vulnerabilities/spectre_v1:Mitigation: __user
pointer sanitization
/sys/devices/system/cpu/vulnerabilities/spectre_v2:Vulnerable: Minimal
generic ASM retpoline
4.15 is not a supported kernel. Either you need to stay on the bleeding
edge, meaning 4.16, or use a supported kernel, like 4.14. See:
https://www.kernel.org
Basically, you need to always use the "mainline" kernel, or a "longterm"
kernel. Other kernels do not NOT get any updates whatsoever. They are
considered dead. 4.15 is a dead kernel.
