Welcome!

The kernel problem with recent updates has been solved. Find the solution here

Important information
-- Required MX 15/16 Repository Changes
-- Information on torrent hosting changes
-- Information on MX15/16 GPG Keys
-- Spectre and Meltdown vulnerabilities

News
-- Introducing our new Website
-- MX Linux on social media: here

Current releases
-- MX-18.3 Point Release release info here
-- Migration Information to MX-18 here
-- antiX-17.4.1 release info here

New users
-- Please read this first, and don't forget to add system and hardware information to posts!
-- Here are the Forum Rules

Which kernel should I use ?

Help for Current Versions of MX
User avatar
oops
Forum Regular
Forum Regular
Posts: 747
Joined: Tue Apr 10, 2018 5:07 pm

Re: Which kernel should I use ?

#11

Post by oops » Thu Sep 27, 2018 5:50 pm

baldyeti wrote:
Thu Sep 27, 2018 5:11 pm

So I have to rely on my distribution maintainers to provide me with the best possible current protection , don't I ?
Running the "inxi" invocation suggested above, I am getting

Code: Select all

# MX17.1 stock 4.15.0-1-amd64 kernel:
	CPU:       Topology: Dual Core model: Intel Core i3-2120 bits: 64 type: MT MCP family: 6 
	model-id: 2A (42) stepping: 7 microcode: 2E L2 cache: 3072 KiB 
	Speed: 2515 MHz min/max: 1600/3300 MHz Core speeds (MHz): 1: 2515 2: 1930 	3: 1981 4: 2721 
	Vulnerabilities: Type: meltdown mitigation: PTI 
	Type: spectre_v1 mitigation: __user pointer sanitization 
	Type: spectre_v2 mitigation: Full generic retpoline, IBPB 
Yes, but do you also have, for the 4.15, these packages installed (at least the related one for your cpu)?

Code: Select all

dpkg -l *microcode* | egrep --color "microcode"
ii  amd64-microcode 3.20160316.3         i386         Processor microcode firmware for AMD CPUs
ii  intel-microcode 3.20180807a.1~deb9u1 i386         Processor microcode firmware for Intel CPUs
un  microcode.ctl   <aucune>             <aucune>     (aucune description n'est disponible)

#exemple version number , with and without the microcode firmware: (here it's with)
grep microcode /proc/cpuinfo
microcode	: 0x218
... It so, it is probably not the latest one
Last edited by oops on Thu Sep 27, 2018 6:10 pm, edited 1 time in total.
$ inxi -Fxxxz : System: Host:XEON ... Distro: MX-18_x64 Continuum

User avatar
baldyeti
Forum Regular
Forum Regular
Posts: 206
Joined: Sat Dec 05, 2009 4:37 pm

Re: Which kernel should I use ?

#12

Post by baldyeti » Thu Sep 27, 2018 6:05 pm

I've got the exact same intel microcode package installed, yet i am getting: microcode : 0x2e

User avatar
oops
Forum Regular
Forum Regular
Posts: 747
Joined: Tue Apr 10, 2018 5:07 pm

Re: Which kernel should I use ?

#13

Post by oops » Thu Sep 27, 2018 6:11 pm

baldyeti wrote:
Thu Sep 27, 2018 6:05 pm
I've got the exact same intel microcode package installed, yet i am getting: microcode : 0x2e
... If so, it is probably not the latest one
$ inxi -Fxxxz : System: Host:XEON ... Distro: MX-18_x64 Continuum

User avatar
Stevo
Forum Veteran
Forum Veteran
Posts: 19561
Joined: Fri Dec 15, 2006 8:07 pm

Re: Which kernel should I use ?

#14

Post by Stevo » Thu Sep 27, 2018 7:30 pm

oops wrote:
Thu Sep 27, 2018 6:11 pm
baldyeti wrote:
Thu Sep 27, 2018 6:05 pm
I've got the exact same intel microcode package installed, yet i am getting: microcode : 0x2e
... If so, it is probably not the latest one
Debian pushed the upstream version into Stretch as a security update, so 3.20180807a is going to be the latest:

https://packages.debian.org/search?keyw ... ection=all

I think just about all the latest threats you've seen for the kernels require that the hacker actually have physical access to your machine. If you're worried about Spectre and other similar exploits, you should be running the latest kernels we provide, or the Debian 4.9 kernel which gets updated. Unfortunately, backporting that newer kernel code to security patches for the 4.15 kernel is beyond our capabilities.

User avatar
oops
Forum Regular
Forum Regular
Posts: 747
Joined: Tue Apr 10, 2018 5:07 pm

Re: Which kernel should I use ?

#15

Post by oops » Thu Sep 27, 2018 7:42 pm

Stevo wrote:
Thu Sep 27, 2018 7:30 pm
Debian pushed the upstream version into Stretch as a security update, so 3.20180807a is going to be the latest:
https://packages.debian.org/search?keyw ... ection=all
Thank you for the info Stevo,
I am not worry about that, it is mostly by principe/quality.
$ inxi -Fxxxz : System: Host:XEON ... Distro: MX-18_x64 Continuum

User avatar
azrielle
Forum Regular
Forum Regular
Posts: 276
Joined: Mon Feb 15, 2016 6:34 am

Re: Which kernel should I use ?

#16

Post by azrielle » Fri Sep 28, 2018 2:34 am

In light of recent revelation that NSA's security algorithm was incorporated into 4.17, 18, & 19, but will be removed in 20, I'd wait until a stable version of 4.20 came out!
Lenovo T430 i5/3320m 8GB MX17.1/Win7SP1 180GB SSD/128GB mSATA
Lenovo X230 i7/3520m 12GB MX17.1/Win7SP1 500GB SSD
Lenovo X131e i3/3227u 8GB MX17.1/AntiX 17.1 Fluxbox/Win7SP1 500GB SSD
Acer AOD257 Atom n570 2GB MX18.1-32bit/Win7SP1 128GB SSD

User avatar
baldyeti
Forum Regular
Forum Regular
Posts: 206
Joined: Sat Dec 05, 2009 4:37 pm

Re: Which kernel should I use ?

#17

Post by baldyeti » Fri Sep 28, 2018 2:45 am

It is unclear to me how µcode reporting works: i get 2E, Richard gets 20 and oops gets 218, all presumably with the same, latest, package in place. Perhaps this jut reflects the fact we have different CPU models ?

In my case, "dmesg | grep microcode" shows "microcode updated early to revision 0x2e, date = 2018-04-10"

and "/usr/sbin/iucode_tool -tb -lS /lib/firmware/intel-ucode/*" says
selected microcodes: 019/001: sig 0x000206a7, pf_mask 0x12, 2018-04-10, rev 0x002e, size 12288

User avatar
stsoh
Forum Regular
Forum Regular
Posts: 449
Joined: Sun Aug 20, 2017 10:11 am

Re: Which kernel should I use ?

#18

Post by stsoh » Fri Sep 28, 2018 3:27 am

azrielle wrote:
Fri Sep 28, 2018 2:34 am
In light of recent revelation that NSA's security algorithm was incorporated into 4.17, 18, & 19, but will be removed in 20, I'd wait until a stable version of 4.20 came out!
if u worry about nsa cryto_speck, u can blacklist it.
open root thunar > goto /etc/modprobe.d/ > create a file named cryto-speck-blacklist.conf > edit input

Code: Select all

blacklist CONFIG_CRYPTO_SPECK
save > close > exit, done.
MX-17.1_x64 Horizon, G41M-P33 Combo (MS-7592), Pentium E5400 (2706 MHz), 8Gb RAM (984 MT/s),
Intel 4 Series Integrated Graphics, Realtek PCIe Fast RTL8101/2/6E, PCI Gigabit RTL8169 Ethernets.
Accepted Linux when i found MX-Linux in 2016.

User avatar
stsoh
Forum Regular
Forum Regular
Posts: 449
Joined: Sun Aug 20, 2017 10:11 am

Re: Which kernel should I use ?

#19

Post by stsoh » Fri Sep 28, 2018 3:53 am

getting old.......kept forgetting......have to update.
open root terminal and input

Code: Select all

# update-initramfs -u
# reboot
MX-17.1_x64 Horizon, G41M-P33 Combo (MS-7592), Pentium E5400 (2706 MHz), 8Gb RAM (984 MT/s),
Intel 4 Series Integrated Graphics, Realtek PCIe Fast RTL8101/2/6E, PCI Gigabit RTL8169 Ethernets.
Accepted Linux when i found MX-Linux in 2016.

User avatar
oops
Forum Regular
Forum Regular
Posts: 747
Joined: Tue Apr 10, 2018 5:07 pm

Re: Which kernel should I use ?

#20

Post by oops » Fri Sep 28, 2018 5:16 am

baldyeti wrote:
Fri Sep 28, 2018 2:45 am
It is unclear to me how µcode reporting works: i get 2E, Richard gets 20 and oops gets 218, all presumably with the same, latest, package in place. Perhaps this jut reflects the fact we have different CPU models ?

In my case, "dmesg | grep microcode" shows "microcode updated early to revision 0x2e, date = 2018-04-10"

and "/usr/sbin/iucode_tool -tb -lS /lib/firmware/intel-ucode/*" says
selected microcodes: 019/001: sig 0x000206a7, pf_mask 0x12, 2018-04-10, rev 0x002e, size 12288
Yes, version number is by CPU model.
Old examples:
https://downloadcenter.intel.com/downlo ... a-File?v=t
$ inxi -Fxxxz : System: Host:XEON ... Distro: MX-18_x64 Continuum

Post Reply

Return to “MX Help”