Source: spectre-meltdown-checker Version: 0.44-3 Severity: normal Tags: upstream fixed-upstream Forwarded: https://github.com/speed47/spectre-meltdown-checker/issues/420 X-Debbugs-Cc: [email protected]
Hi Holger, spectre-meltdown-checker has false positive for CVE-2017-5715 due to the changes in Linux upstream applied for the Spectre-BHB variant, and switching to generic retpolines. Cf. https://www.vusec.net/projects/bhi-spectre-bhb/ and DSA-5095-1 and DSA-5096-1. Upstream has adjusted the test following from https://github.com/speed47/spectre-meltdown-checker/issues/420 . Regards, Salvatore

