Spectre vulnerabilities on linux VMs on a Windows host machine

agalmethu35 · 11-22-2020, 12:13 AM

I ran spectre checker on both my fedora and debian buster VirtualBox VMs on Win 10 host (20H2 version) and both reporting that they are vulnerable to CVE-2018-3639, CVE-2018-3640 and CVE-2020-0543. I'm pretty sure that my Win10 installation has been patched for the CVE-2018-3639 and CVE-2018-3640 since those have been patched in earlier versions of Win 10. so why would the VMs be reporting that they haven't been mitigated ? am I missing something here ?Tweakbox Appvalley https://vlc.onl

ondoho · 11-22-2020, 03:06 AM

Quote:

Originally Posted by agalmethu35

I ran spectre checker on both my fedora and debian buster VirtualBox VMs on Win 10 host (20H2 version) and both reporting that they are vulnerable to CVE-2018-3639, CVE-2018-3640 and CVE-2020-0543. I'm pretty sure that my Win10 installation has been patched for the CVE-2018-3639 and CVE-2018-3640 since those have been patched in earlier versions of Win 10. so why would the VMs be reporting that they haven't been mitigated ? am I missing something here ?

It's pointless doing this on a Linux VM.
Repeat the tests on bare metal.