Sreyen:

I ran the scripts as you suggested and also got the

 * CPU microcode is the latest known available version:  NO

and went to my vendor's website (Dell, in my case) and found there was a
new BIOS update, installed it, re-ran the tests and passed.

Is it possible that it is your firmware that needs an update?



On Sun, Jun 28, 2020 at 7:34 PM Sreyan Chakravarty <sreya...@gmail.com>
wrote:

> Hi,
>
> Well guys, its time to panic once again.
>
>
> I just found out my system is vulnerable to the new Crosstalk
> vulnerability by running the popular Meltdown OVH script.
>
> More about the vulnerability over here:
>
> https://www.vusec.net/projects/crosstalk/
>
> These exploits get worse each time, this one affects all cores.
>
>
> This is how I tested for the vulnerability.
>
> Downloaded spectre-meltdown-checker.sh via :
>
> wget https://meltdown.ovh -O spectre-meltdown-checker.sh
>
> and then just executed with sudo.
>
> This is the output I got:
>
> * SRBDS mitigation control is enabled and active:  NO
> > STATUS:  VULNERABLE  (Your CPU microcode may need to be updated to mitigate 
> > the vulnerability)
>
> CVE-2020-0543:KO
>
> Full output here:https://pastebin.com/raw/hyfFBbaF
>
>
> As you can see the tool specifies that my microcode is not the latest.
>
> That being said, where do I find the latest microcode from ?
>
> My OS is fully updated, and the firmware and microcode is also latest
> according to DNF:
>
> $ sudo dnf update linux-firmware
> Dependencies resolved.
> Nothing to do.
> Complete!
>
> $ sudo dnf update microcode_ctl
> Dependencies resolved.
> Nothing to do.
> Complete!
>
> So where is the microcode update in Fedora for this ??
>
> Canonical has already published microcode updates for this, as shown 
> here:https://youtu.be/UR-5vAZ1cGg?t=1160
>
> <rant>
> It kind of seems frustrating that a bleeding edge distro like Fedora still 
> hasn't
>  provided updates yet. While Ubuntu a distro that doesn't always use the 
> latest
> software already has a fix.
> </rant>
>
> What can I do now ? What is progress for Fedora ?
>
> Will the microcode from Canonical work for Fedora ? Dumb question I know but I
> am desperate.
>
> Let me know if any further info is required.
>
> Some more info about my CPU:https://pastebin.com/raw/TNJS930F
>
>
> What is everyone else in the community doing about this ?
>
> Thanks.
>
> --
> Regards,
> Sreyan
>
> _______________________________________________
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-le...@lists.fedoraproject.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
>
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org

Reply via email to