0 Members and 6 Guests are viewing this topic.
Do the new meltdown / spectre kernels update automatically or is this something I have to manually do using Synaptic Package Manager
Is the kernel posted above secure enough or is there a new more secure kernel which I should update to
$ grep . /sys/devices/system/cpu/vulnerabilities/*
System: Host: supergamer Kernel: 4.13.0-33-generic x86_64 (64 bit gcc: 5.4.0) Desktop: Xfce 4.12.3 (Gtk 2.24.28) Distro: Ubuntu 16.04 xenialMachine: System: TOSHIBA (portable) product: Satellite L505D v: PSLV6U-00K001 Mobo: TOSHIBA model: Portable PC Bios: Insyde v: 1.00 date: 09/07/2009CPU: Dual core AMD Athlon II M300 (-MCP-) cache: 1024 KB flags: (lm nx sse sse2 sse3 sse4a svm) bmips: 7979 clock speeds: max: 2000 MHz 1: 1400 MHz 2: 800 MHzGraphics: Card: Advanced Micro Devices [AMD/ATI] RS880M [Mobility Radeon HD 4100] bus-ID: 01:05.0 Display Server: X.Org 1.18.4 drivers: ati,radeon (unloaded: fbdev,vesa) Resolution: [email protected] GLX Renderer: AMD RS880 (DRM 2.50.0 / 4.13.0-33-generic, LLVM 5.0.0) GLX Version: 3.0 Mesa 17.2.8 Direct Rendering: YesAudio: Card Advanced Micro Devices [AMD/ATI] SBx00 Azalia (Intel HDA) driver: snd_hda_intel bus-ID: 00:14.2 Sound: Advanced Linux Sound Architecture v: k4.13.0-33-genericNetwork: Card-1: Realtek RTL8187SE Wireless LAN Controller driver: rtl818x_pci port: 7000 bus-ID: 02:00.0 IF: wlp2s0 state: up mac: <filter> Card-2: Realtek RTL8101/2/6E PCI Express Fast/Gigabit Ethernet controller driver: r8169 v: 2.3LK-NAPI port: 6000 bus-ID: 03:00.0 IF: p5p1 state: down mac: <filter>Drives: HDD Total Size: 250.1GB (36.2% used) ID-1: /dev/sda model: TOSHIBA_MK2555GS size: 250.1GBPartition: ID-1: / size: 227G used: 82G (38%) fs: ext4 dev: /dev/sda1 ID-2: swap-1 size: 2.95GB used: 0.00GB (0%) fs: swap dev: /dev/sda5RAID: No RAID devices: /proc/mdstat, md_mod kernel module presentSensors: System Temperatures: cpu: 67.0C mobo: N/A Fan Speeds (in rpm): cpu: N/AInfo: Processes: 165 Uptime: 13 min Memory: 875.9/2746.7MB Init: systemd runlevel: 5 Gcc sys: 5.4.0 Client: Shell (bash 4.3.481) inxi: 2.2.35
/sys/devices/system/cpu/vulnerabilities/meltdown:Not affected/sys/devices/system/cpu/vulnerabilities/spectre_v1:Mitigation: OSB (observable speculation barrier, Intel v6)/sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Full AMD retpoline
It seems the new kernel 4.13.33 fixes the variant 2 version on an older amd at least.
/sys/devices/system/cpu/vulnerabilities/meltdown:Not affected/sys/devices/system/cpu/vulnerabilities/spectre_v1:Vulnerable/sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Full generic retpoline
You are invited to test and provide feedback for the following updated Linux kernels. We have also rebased all derivative kernels such as the public cloud kernels (Amazon, Google, Microsoft, etc) and the Hardware Enablement (HWE) kernels.