On Tue, Oct 30, 2018 at 5:06 AM Veetil, Vyshnav Vyshnav.Veetil@harman.com wrote:
We ran the spectre meltdown checker tool provided by: https://github.com/speed47/spectre-meltdown-checker.
And it says that we are still vulnerable to variant #2 since RSB filling is not enabled in our kernel
When we googled, the following bugzilla from RH suggests that it is enabled by default:
https://bugzilla.redhat.com/show_bug.cg ... 2018-15572
When I was checking the source code of the latest CentOS kernel ,i don't see this feature flag set anywhere - X86_FEATURE_RSB_CTXSW.
Could you please tell us ,If the Latest CentOS kernel supports RSB filling or not ?!
According to https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-15572 (see comment 4),
"This issue does not affect the versions of the kernel package as shipped with Red Hat Enterprise Linux 6, 7 and Red Hat Enterprise MRG 2."
And comment 8 explains why.
Akemi