Skip to content

Add Linux 4.14.19 (with Spectre v2 mitigation) #613

Merged
merged 3 commits into from
Feb 13, 2018
Merged

Conversation

pmenzel
Copy link
Collaborator

@pmenzel pmenzel commented Feb 13, 2018

This release is built with GCC 7.3.0, and therefore features all Linux kernel mitigations against Spectre v2.

$ uname -a
Linux keineahnung.molgen.mpg.de 4.14.19.mx64.207 #1 SMP Tue Feb 13 11:54:53 CET 2018 x86_64 GNU/Linux
$ grep . /sys/devices/system/cpu/vulnerabilities/*
/sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI
/sys/devices/system/cpu/vulnerabilities/spectre_v1:Mitigation: __user pointer sanitization
/sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Full generic retpoline

Tested on keineahnung.

@pmenzel pmenzel changed the title Add Linux 4.14.19 (with Add Linux 4.14.19 (with Spectre v2 mitigation) Feb 13, 2018
@pmenzel
Copy link
Collaborator Author

pmenzel commented Feb 13, 2018

I need to fix one commit message.

Announcements and change-logs are available online [1][2].

This release is built with GCC 7.3.0 instead of GCC 5.5.0, and therefore
contains full mitigation against Spectre v2, cf. commit f4c8184 (gcc:
Update version from 5.5.0 to 7.3.0).

Before:

```
/sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI
/sys/devices/system/cpu/vulnerabilities/spectre_v1:Mitigation: __user pointer sanitization
/sys/devices/system/cpu/vulnerabilities/spectre_v2:Vulnerable: Minimal generic ASM retpoline
```

After:

```
/sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI
/sys/devices/system/cpu/vulnerabilities/spectre_v1:Mitigation: __user pointer sanitization
/sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Full generic retpoline
```

[1] https://lkml.org/lkml/2018/2/13/154
[2] https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.19
@pmenzel
Copy link
Collaborator Author

pmenzel commented Feb 13, 2018

Should be ready. Please test.

@donald
Copy link
Collaborator

donald commented Feb 13, 2018

tested on theinternet , claptrap (nfs server)

@donald donald merged commit e3b406b into master Feb 13, 2018
@donald donald deleted the add-linux-4.14.19 branch February 14, 2018 15:05
Sign in to join this conversation on GitHub.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants