GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    Thorsten Leemhuis (acct. 1/4) (kernellogger@fosstodon.org)'s status on Wednesday, 09-Aug-2023 04:17:15 JSTThorsten Leemhuis (acct. 1/4)Thorsten Leemhuis (acct. 1/4)
    • Greg K-H

    A bunch of new stable and longterm #Linux #kernel with mitigations for the #AMD #INCEPTION vulnerability aka CVE-2023-20569 and the #Intel #Downfall[2] vulnerability aka CVE-2022-40982 are now available on https://kernel.org.

    @gregkh wrote: those fixes were "a pain to get done, odds are it will take a few more cycles and fixups once it hits real testing...". [3]

    [1] https://fosstodon.org/@kernellogger/110855114931496454

    [2] https://fosstodon.org/@kernellogger/110855362577587321

    [3] https://social.kernel.org/objects/b82b2de0-6eca-44c3-99b4-68fc954a98fc

    In conversationabout a year ago from fosstodon.orgpermalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: kernel.org
      The Linux Kernel Archives

    2. https://cdn.fosstodon.org/media_attachments/files/110/855/565/691/558/038/original/2793a7f9dc4e3c4e.png
    3. Domain not in remote thumbnail source whitelist: cdn.fosstodon.org
      Thorsten Leemhuis (1/4) (@kernellogger@fosstodon.org)
      from Thorsten Leemhuis (1/4)
      Attached: 1 image The #Linux mainline #kernel gained mitigations for the speculative RAS (Return Address Stack) overflow vulnerability on #AMD processors. In short, this is yet another issue where userspace poisons a microarchitectural structure which can then be used to leak privileged information through a side channel: https://git.kernel.org/linus/138bcddb86d8a4f842e4ed6f0585abc9b1a764ff #LinuxKernel AMD published details about this "#INCEPTION" vulnerability in modern Zen CPUs (CVE-2023-20569) here: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7005.html
    4. Domain not in remote thumbnail source whitelist: cdn.fosstodon.org
      Thorsten Leemhuis (1/4) (@kernellogger@fosstodon.org)
      from Thorsten Leemhuis (1/4)
      Attached: 1 image The #Linux mainline #kernel also[1] gained mitigations for the Gather Data Sampling (GDS) #Intel AVX2/AVX-512 hardware vulnerability which allows unprivileged speculative access to data which was previously stored in vector registers: https://git.kernel.org/torvalds/c/64094e7e3118aff4b0be8ff713c242303e139834 Details of this "#Downfall" vulnerability aka CVE-2022-40982 can be found in a advisory from intel (https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html ) and https://downfall.page. [1] for an AMD issue mitigated in parallel, see https://fosstodon.org/@kernellogger/110855114931496454

  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.