Source: spectre-meltdown-checker
Version: 0.44-3
Severity: normal
Tags: upstream fixed-upstream
Forwarded: https://github.com/speed47/spectre-meltdown-checker/issues/420
X-Debbugs-Cc: [email protected]

Hi Holger,

spectre-meltdown-checker has false positive for CVE-2017-5715 due to
the changes in Linux upstream applied for the Spectre-BHB variant, and
switching to generic retpolines.

Cf. https://www.vusec.net/projects/bhi-spectre-bhb/ and DSA-5095-1 and
DSA-5096-1.

Upstream has adjusted the test following from
https://github.com/speed47/spectre-meltdown-checker/issues/420 .

Regards,
Salvatore

Reply via email to