On Wed, 28 Feb 2018 11:50:09 -0600, Doug Newgard via arch-general wrote:
>You're looking at the dates that the last *bundle* was released. That
>says nothing about what firmware is available for your processor.
Let alone that the µcode could be fishy, as it seemingly is for my CPU.
I don't expect that Intel will support older CPUs.
[rocketmouse@archlinux ~]$ hwinfo --cpu | grep Model | sort -u
Model: 6.60.3 "Intel(R) Celeron(R) CPU G1840 @ 2.80GHz"
[rocketmouse@archlinux ~]$ dmesg | grep microcode
[ 0.000000] microcode: microcode updated early to revision 0x23, date = 2017-11-20
[ 0.000000] Intel Spectre v2 broken microcode detected; disabling Speculation Control
[ 0.329718] microcode: sig=0x306c3, pf=0x2, revision=0x23
[ 0.329837] microcode: Microcode Update Driver: v2.2.
[rocketmouse@archlinux ~]$ ls -hAl /sys/devices/system/cpu/vulnerabilities/
total 0
-r--r--r-- 1 root root 4.0K Feb 28 04:11 meltdown
-r--r--r-- 1 root root 4.0K Feb 28 04:11 spectre_v1
-r--r--r-- 1 root root 4.0K Feb 28 04:11 spectre_v2
[rocketmouse@archlinux ~]$ cat /sys/devices/system/cpu/vulnerabilities/*
Mitigation: PTI
Mitigation: __user pointer sanitization
Mitigation: Full generic retpoline
--
$ pacman -Q linux{,-rt-securityink,-rt,-rt-pussytoes,-rt-cornflower}
linux 4.15.6-1
linux-rt-securityink 4.14.20_rt17-1
linux-rt 4.14.12_rt10-1
linux-rt-pussytoes 4.14.8_rt9-2
linux-rt-cornflower 4.11.12_rt16-1
