GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Conversation

Notices

  1. Embed this notice
    Greg K-H (gregkh@social.kernel.org)'s status on Wednesday, 09-Aug-2023 04:17:14 JST Greg K-H Greg K-H
    in reply to
    • Thorsten Leemhuis (acct. 1/4)
    @kernellogger You forgot the Xen bugfix in there too, 3 things at once!
    In conversation about a year ago from social.kernel.org permalink
    • Haelwenn /элвэн/ :triskell: likes this.
    • Embed this notice
      Thorsten Leemhuis (acct. 1/4) (kernellogger@fosstodon.org)'s status on Wednesday, 09-Aug-2023 04:17:15 JST Thorsten Leemhuis (acct. 1/4) Thorsten Leemhuis (acct. 1/4)

      A bunch of new stable and longterm #Linux #kernel with mitigations for the #AMD #INCEPTION vulnerability aka CVE-2023-20569 and the #Intel #Downfall[2] vulnerability aka CVE-2022-40982 are now available on https://kernel.org.

      @gregkh wrote: those fixes were "a pain to get done, odds are it will take a few more cycles and fixups once it hits real testing...". [3]

      [1] https://fosstodon.org/@kernellogger/110855114931496454

      [2] https://fosstodon.org/@kernellogger/110855362577587321

      [3] https://social.kernel.org/objects/b82b2de0-6eca-44c3-99b4-68fc954a98fc

      In conversation about a year ago permalink

      Attachments

      1. Domain not in remote thumbnail source whitelist: kernel.org
        The Linux Kernel Archives

      2. https://cdn.fosstodon.org/media_attachments/files/110/855/565/691/558/038/original/2793a7f9dc4e3c4e.png
      3. Domain not in remote thumbnail source whitelist: cdn.fosstodon.org
        Thorsten Leemhuis (1/4) (@kernellogger@fosstodon.org)
        from Thorsten Leemhuis (1/4)
        Attached: 1 image The #Linux mainline #kernel gained mitigations for the speculative RAS (Return Address Stack) overflow vulnerability on #AMD processors. In short, this is yet another issue where userspace poisons a microarchitectural structure which can then be used to leak privileged information through a side channel: https://git.kernel.org/linus/138bcddb86d8a4f842e4ed6f0585abc9b1a764ff #LinuxKernel AMD published details about this "#INCEPTION" vulnerability in modern Zen CPUs (CVE-2023-20569) here: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7005.html
      4. Domain not in remote thumbnail source whitelist: cdn.fosstodon.org
        Thorsten Leemhuis (1/4) (@kernellogger@fosstodon.org)
        from Thorsten Leemhuis (1/4)
        Attached: 1 image The #Linux mainline #kernel also[1] gained mitigations for the Gather Data Sampling (GDS) #Intel AVX2/AVX-512 hardware vulnerability which allows unprivileged speculative access to data which was previously stored in vector registers: https://git.kernel.org/torvalds/c/64094e7e3118aff4b0be8ff713c242303e139834 Details of this "#Downfall" vulnerability aka CVE-2022-40982 can be found in a advisory from intel (https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html ) and https://downfall.page. [1] for an AMD issue mitigated in parallel, see https://fosstodon.org/@kernellogger/110855114931496454

Feeds

  • Activity Streams
  • RSS 2.0
  • Atom
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.