LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware > Slackware - ARM
User Name
Password
Slackware - ARM This forum is for the discussion of Slackware ARM.

Notices


Reply
  Search this Thread
Old 01-04-2018, 01:50 PM   #1
abga
Member
 
Registered: Jul 2017
Location: EU
Distribution: Slackware Gentoo ARM (eval)
Posts: 206

Rep: Reputation: 83
Exclamation Spectre - new exploit for ARM cores that have a speculative execution engine implemented - check if your platform is affected


There is a new vulnerability recently found for ARM CPUs (Intel/AMD x86 also affected) that are implementing speculative execution.
https://en.wikipedia.org/wiki/Spectr...vulnerability)

ARM released a list of affected cores. If you're a security freak, then you might want to check if your platform is affected:
https://developer.arm.com/support/security-update

Raspberry Pi boards (all) are apparently not affected:
https://en.wikipedia.org/wiki/Raspbe...Specifications

Last edited by abga; 01-04-2018 at 01:52 PM. Reason: broken link - ) after [/url]
 
Old 01-05-2018, 12:37 PM   #2
drmozes
Slackware Contributor
 
Registered: Apr 2008
Location: Surrey, England
Distribution: Slackware
Posts: 615

Rep: Reputation: 437Reputation: 437Reputation: 437Reputation: 437Reputation: 437
Quote:
Originally Posted by abga View Post
There is a new vulnerability recently found for ARM CPUs (Intel/AMD x86 also affected) that are implementing speculative execution.
https://en.wikipedia.org/wiki/Spectr...vulnerability)

ARM released a list of affected cores. If you're a security freak, then you might want to check if your platform is affected:
https://developer.arm.com/support/security-update

Raspberry Pi boards (all) are apparently not affected:
https://en.wikipedia.org/wiki/Raspbe...Specifications
I believe that the Trimslice (Tegra 20 / Cortex-A9) is the only officially supported device to be affected by :
Variant 1: bounds check bypass (CVE-2017-5753)
Variant 2: branch target injection (CVE-2017-5715)

I don't think there are fixes for it yet for ARM though (https://github.com/ARM-software/arm-...Advisory-TFV-6)
 
1 members found this post helpful.
Old 01-06-2018, 03:40 AM   #3
lilianfornea
Member
 
Registered: Jul 2017
Location: Stauceni, Chisinau, Moldova
Distribution: Slackware, NuTyX
Posts: 35

Rep: Reputation: Disabled
Quote:
Originally Posted by abga View Post
Raspberry Pi boards (all) are apparently not affected:
https://en.wikipedia.org/wiki/Raspbe...Specifications
Banana/Orange/Pine64 also.

Less lucky are BeagleBoard, Cubieboard, Odroid
 
Old 01-10-2018, 05:56 AM   #4
abga
Member
 
Registered: Jul 2017
Location: EU
Distribution: Slackware Gentoo ARM (eval)
Posts: 206

Original Poster
Rep: Reputation: 83
Without the intention to advertise / promote something, I found "Sir" Eben Upton's last blog entry very interesting in explaining these new vulnerabilities. Being himself a HW engineer and working for Broadcom before, he's obviously well versed in the HW internals of the modern chips:
https://www.raspberrypi.org/blog/why...e-or-meltdown/
 
2 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: 275 million Android phones imperiled by new code-execution exploit LXer Syndicated Linux News 0 03-20-2016 03:18 AM
Migrating zilog z80 to arm arm embedded platform with virtualization vfpereira Linux - Virtualization and Cloud 3 02-10-2015 05:52 AM
how can program determine: # of cores, execution core, core cps maxreason Programming 5 12-14-2012 07:40 PM
LXer: Intel CPUs affected by VM privilege escalation exploit LXer Syndicated Linux News 0 06-13-2012 10:40 AM
Apache exploit leading to arbitrary execution. Fixes? prell Linux - Security 10 09-22-2004 09:54 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware > Slackware - ARM

All times are GMT -5. The time now is 01:23 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration