LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 01-03-2018, 10:34 PM   #1
caseyl
LQ Newbie
 
Registered: Jan 2018
Distribution: Fedora
Posts: 19

Rep: Reputation: Disabled
Vulnerabilities such as Meltdown and Spectre


Vulnerabilities such as Meltdown and Spectre are not specifically Linux issues, however they could have a dire effect on Linux machines. I was very surprised to hear that these vulnerabilities could possibly exploit chips that are nearly 20 years old.

It appears to me that developers have the issue with Meltdown well in hand, however I am a bit unclear on Spectre.

For my fellow Fedora users, the Fedora Magazine addressed the issue today at: https://fedoramagazine.org/protect-f...stem-meltdown/
 
Old 01-03-2018, 10:45 PM   #2
_roman_
Member
 
Registered: Dec 2017
Location: _Austro_Bavaria_
Distribution: gentoo / linux mint
Posts: 433

Rep: Reputation: 29
Should be merged with my topic

https://www.linuxquestions.org/quest...ug-4175620852/

only google named it that way.

When I had read about it there was no name for it yet. It seems a very old issue which google just now named it for the public

I also saw the slackware guys here are also discussing about it already in their slackware area
 
Old 01-04-2018, 07:41 PM   #3
caseyl
LQ Newbie
 
Registered: Jan 2018
Distribution: Fedora
Posts: 19

Original Poster
Rep: Reputation: Disabled
News for Ubuntu

Dustin Kirkland of Canonical has posted updates about Meltdown and Spectre. Included in his post is the following:

"Ubuntu users of the 64-bit x86 architecture (aka, amd64) can expect updated kernels by the original January 9, 2018 coordinated release date, and sooner if possible."

His post is at: http://blog.dustinkirkland.com/2018/...n-spectre.html
 
Old 01-11-2018, 04:04 AM   #4
LittleMaster
Member
 
Registered: Jun 2012
Posts: 117
Blog Entries: 1

Rep: Reputation: Disabled
Hi cylants,


https://meltdownattack.com/#faq-cve-spectre

https://googleprojectzero.blogspot.i...with-side.html

Redhat has been reported with below mentioned CVE . You can track official Redhat updates on below LINK


https://access.redhat.com/security/cve/cve-2017-5753

https://access.redhat.com/security/cve/cve-2017-5715

https://access.redhat.com/security/cve/cve-2017-5754

Last edited by LittleMaster; 01-11-2018 at 04:17 AM.
 
Old 01-11-2018, 02:37 PM   #5
Linux_Kidd
Member
 
Registered: Jan 2006
Location: USA
Posts: 593

Rep: Reputation: 62
overall, we are applying compensating controls, not fixing the actual issue.
the issue is at the CPU level. the "fixes" are above that.

Intel and the like will need to re-die stuff to make this issue go away.
 
Old 01-22-2018, 12:42 PM   #6
Crippled
Member
 
Registered: Sep 2015
Distribution: Xubuntu 18.04LTS
Posts: 333

Rep: Reputation: Disabled
This is what happens to un-patched systems. https://www.youtube.com/watch?v=DOxBMzSuk4g
 
Old 01-22-2018, 01:34 PM   #7
dave@burn-it.co.uk
Member
 
Registered: Sep 2011
Distribution: Puppy
Posts: 601

Rep: Reputation: 172Reputation: 172
CAN perhaps happen now that the vulnerabilities that have been around for "twenty years" have ben publicised for bad hackers to use.
Up to now, no one has reported a single case of anyone taking advantage of the flaw, which, quite honestly, was know and ignored by chip designers for speed reasons, since the flaw was rarely to occur in unforced circumstances.
 
Old 01-22-2018, 09:14 PM   #8
caseyl
LQ Newbie
 
Registered: Jan 2018
Distribution: Fedora
Posts: 19

Original Poster
Rep: Reputation: Disabled
Linus Torvalds' Response

This recent email list really points out the failings of Intel. http://lkml.iu.edu/hypermail/linux/k...1.2/04628.html
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] New netbook for Slackware: HP Spectre x360 (13-4105ng) DarkVision Slackware 35 02-19-2018 11:18 PM
(HP Spectre Notebook) compatibility Gianfranco Linux - Laptop and Netbook 2 02-14-2017 02:56 AM
PCH Sound Card not detected on elementary OS 0.3.2 with HP Spectre x360 CWezo10 Linux - Newbie 7 12-25-2015 04:12 AM
[SOLVED] KDE meltdown qrange Linux - Newbie 4 07-08-2012 09:46 AM
Update Meltdown!!! socal_dsmarmy Linux - Newbie 4 02-23-2010 04:41 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 03:44 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration