Re: [Test-Announce] Call for testing: updates to address today's CPU/kernel vulnerability

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Jan 4, 2018 at 2:49 AM, stan <stanl-fedorauser@xxxxxxxxxxx> wrote:
> On Thu, 4 Jan 2018 09:23:58 +0800
> Ed Greshko <ed.greshko@xxxxxxxxxxx> wrote:
>
>
>> And how about
>> https://www.windowscentral.com/all-modern-processors-impacted-new-meltdown-and-spectre-exploits
>> ?
>
>> Unless there is a significant performance hit isn't it better to just
>> be safe and make it for all?
>
> Wow, SPECTRE is an ingenious attack, and devastating. It will be
> interesting to read the fix that is implemented for it.  If the fix is
> for spectre as well as meltdown, yes, it makes sense to put it on all
> modern processors.
>
> But, if I don't have to take a hit to processing power, I'd rather
> not.  i.e. if the fix is only for meltdown, and I'm not affected, why
> take the hit?

In the brief look I took at the patches the fixes are only applied if
the processor is vulnerable, so in the case of meltdown, it's only
applied to the affected processors. This is generally the case with
most CPU HW errata, whether a CVE or not, but also I suspect the
kernel teams will be erring of the side of caution and will
adjust/improve as things can be verified and tested.

Peter
_______________________________________________
test mailing list -- test@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to test-leave@xxxxxxxxxxxxxxxxxxxxxxx




[Index of Archives]     [Fedora Desktop]     [Fedora SELinux]     [Photo Sharing]     [Yosemite Forum]     [KDE Users]

  Powered by Linux