On Wed, 9 Mar 2022 19:22:15 +0100, Arve Barsnes wrote: >On Wed, 9 Mar 2022 at 19:16, gene heskett <gheskett@xxxxxxxxxxx> wrote: >> Is this kernel vulnerable? >> 4.19.71-rt24-v7l+ #1 SMP PREEMPT RT Thu Feb 6 07:09:18 EST 2020 >> armv7l GNU/Linux > >No, the vulnerability was introduced in kernel 5.8 Hi, that is my understanding, too, hence my reply yesterday on another mailing list, see https://lists.ubuntu.com/archives/ubuntu-users/2022-March/307093.html . However, 4.19 kernels received many patches and I haven't verified myself that non of those patches includes a backport introducing dirty pipe or any other nasty issue. Regards, Ralf -- [rocketmouse@archlinux ~]$ pacman -Q linux-rt{-cornflower,-pussytoes,,-securityink}|cut -d\ -f2 4.19.230_rt103-0.300 4.19.227_rt102-0.300 4.19.223_rt100-0.1000 4.19.219_rt97-0.300 [rocketmouse@archlinux ~]$ echo $(uname -srvm;zgrep CONFIG_AUDIT\ /proc/config.gz || zgrep CONFIG_AUDIT= /proc/config.gz);echo;cat /proc/cmdline;echo;grep . /sys/devices/system/cpu/vulnerabilities/* | cut -d/ -f7;rtirq status|head -8 Linux 4.19.230-rt103-0.300-cornflower #1 SMP PREEMPT RT Tue, 22 Feb 2022 07:30:23 +0100 x86_64 # CONFIG_AUDIT is not set BOOT_IMAGE=../vmlinuz-linux-rt-cornflower root=LABEL=s3.archlinux ro initrd=../intel-ucode.img,../initramfs-linux-rt-cornflower.img itlb_multihit:KVM: Mitigation: Split huge pages l1tf:Mitigation: PTE Inversion; VMX: conditional cache flushes, SMT disabled mds:Mitigation: Clear CPU buffers; SMT disabled meltdown:Mitigation: PTI spec_store_bypass:Mitigation: Speculative Store Bypass disabled via prctl and seccomp spectre_v1:Mitigation: usercopy spectre_v2:Mitigation: Full generic retpoline, IBPB: conditional, IBRS_FW, STIBP: disabled, RSB filling srbds:Mitigation: Microcode tsx_async_abort:Not affected PID CLS RTPRIO NI PRI %CPU STAT COMMAND 142 FF 90 - 130 0.0 S irq/24-xhci_hcd 153 FF 90 - 130 0.0 S irq/16-ehci_hcd 156 FF 89 - 129 0.0 S irq/23-ehci_hcd 312 FF 85 - 125 0.0 S irq/16-snd_hdsp 339 FF 80 - 120 0.0 S irq/16-snd_ice1 42 FF 50 - 90 0.0 S irq/9-acpi
