On Wed, Aug 15, 2018 at 09:08:15AM +0200, Markus Schade wrote: > Package: intel-microcode > Version: 3.20180425.1 > Severity: grave > Tags: security > > Dear Maintainer, > > Intel has released a new microcode version which includes updates for > further CPU models providing the necessary code for SSBD as well as the > recently disclosed L1TF vulnerability > > https://downloadcenter.intel.com/download/28039/Linux-Processor-Microcode-Data-File
Hi Markus, This microcode release happened a week before the disclosure of L1TF and with all previous CPU bugs, Intel initially only shipped updates to OEMs and only released general microcode updates weeks/months later. Have you been able to confirm (e.g. by testing) that 20180807 implements changes necessary for L1TF (such as L1D_FLUSH) or is there some official statement by Intel on this? Cheers, Moritz