Simple command to check Meltdown and Spectre kernel status

[Stevo]

The newer 4.14.17 kernel (amd64) is built and is seen as an upgrade to the 4.14.13 kernel. It provides these results:

Code: Select all

/sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI
/sys/devices/system/cpu/vulnerabilities/spectre_v1:Vulnerable
/sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Full generic retpoline

So it's better now against spectre_v2, but still not as good as Liquorix for variant 1. Let me see what the 4.15.4 kernel reports.

[Stevo]

The middle line is now

Code: Select all

/sys/devices/system/cpu/vulnerabilities/spectre_v1:Mitigation: __user pointer sanitization

with the 4.15 kernel.

[rokytnji.1]

I don't think any 32 bit kernel has been secured, even partially.

Sigh/ aint that special.

[Stevo]

The kernel developers say there is work being done for 32-bit, but don't promise a speedy solution.