Does the CPU in a virtual machine inherit the sins (vulnerabilities) of its father?

taylorkh · 01-10-2018, 12:38 PM

I am running VMWare Player 12.5.7 on a Dell Precision workstation with an Intel i7-6700 - CentOS 7 (as the host). This processor would appear to be in the population susceptible to Spectra & Meltdown.

If I fire up a CentOS 7 virtual machine on this host is the "virtual CPU" also susceptible?

How about if I run a 32 bit virtual machine such as a virtualized Windows 7 image made from a 32 bit physical machine? Or perhaps Ubuntu 32 bit built in VMWare player on the host?

By susceptible I am referring to an attack vector into the VM (from a web browser attach perhaps) getting to an encryption key in the memory of the VM. I am not considering an attack vector into the memory of the host and then into the memory of a VM which happens to be residing in the physical RAM of the host.

TIA,

Ken

jefro · 01-10-2018, 02:46 PM

You will have to have all OS's updated usually. Not sure why you'd not update them all.

I don't know what would happen if you ran a qemu processor but I'd assume it is flawed too.

taylorkh · 01-10-2018, 03:31 PM

Thanks jefro, I DO update all of the systems. I was just wondering if visualization emulated vulnerabilities as well as other hardware features

I knew I should have bought a Dec Alpha based workstation some years ago. In only cost as much as a mid size car. As it is, the only machines which I have which are immune from the current vulnerabilities du jour are an ancient Pentium 4 desktop, an Intel Atom (under)powered netbook and a Raspberry Pi (which runs only 32 bit). I should never have gotten rid of my Osborne

Ken

jefro · 01-10-2018, 07:39 PM

The threats continue everyday.

Not sure the DEC Alpha is immune now that you mention it. Wonder if it was tested? It does share a lot of design with newer intel processors I thought as DEC was parted out.

My neighbor was selling Alpha processors at one time for $5000 each in lots of 1000. Where I work at we still run them. A $25,000 system, seemingly well spent.

Aeterna · 01-11-2018, 08:03 AM

Quote:

Originally Posted by taylorkh

I am running VMWare Player 12.5.7 on a Dell Precision workstation with an Intel i7-6700 - CentOS 7 (as the host). This processor would appear to be in the population susceptible to Spectra & Meltdown.

If I fire up a CentOS 7 virtual machine on this host is the "virtual CPU" also susceptible?

How about if I run a 32 bit virtual machine such as a virtualized Windows 7 image made from a 32 bit physical machine? Or perhaps Ubuntu 32 bit built in VMWare player on the host?

By susceptible I am referring to an attack vector into the VM (from a web browser attach perhaps) getting to an encryption key in the memory of the VM. I am not considering an attack vector into the memory of the host and then into the memory of a VM which happens to be residing in the physical RAM of the host.

TIA,

Ken

it looks like you are safe(r):
https://www.linuxglobal.com/meltdown...-technologies/
VMware and Virtualbox (in VT) are not vulnerable to Meltdown
Spectre allows to read guest memory

Don't use chrome (JIT) even with AMD CPU

hope this will help