The 4.17.14-202 build contains patches for the "foreshadow " security issue that were missing from the 201 builds.

Reboot Required
After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

sudo dnf upgrade --advisory=FEDORA-2018-f8cba144ae

This update has been submitted for testing by jforbes.

2 years ago

jforbes edited this update.

2 years ago
User Icon ibims commented & provided feedback 2 years ago
karma

works. ls -l /sys/devices/system/cpu/vulnerabilities/ shows now -r--r--r-- 1 root root 4096 15. Aug 18:53 l1tf

i forgot to show:

cat /sys/devices/system/cpu/vulnerabilities/l1tf Mitigation: PTE Inversion; VMX: conditional cache flushes, SMT disabled

User Icon markec provided feedback 2 years ago
karma
User Icon klaas commented & provided feedback 2 years ago
karma

flush_l1d shows up in cpu flags, /sys/devices/system/cpu/vulnerabilities/l1tf works -- lgtm

This update has been pushed to testing.

2 years ago

This update has been submitted for batched by bodhi.

2 years ago

This update has been submitted for stable by jforbes.

2 years ago
User Icon imabug provided feedback 2 years ago
karma
User Icon dhgutteridge commented & provided feedback 2 years ago
karma

No regressions noted.

This update has been pushed to stable.

2 years ago
User Icon mjg commented & provided feedback 2 years ago
karma

wfm

Mitigation: PTE Inversion; VMX: conditional cache flushes, SMT vulnerable

This is without extra smt kernel parameters or sysfs fiddling

Is 4.17.17 going to be next build or are you preparing 4.18.3 already?


Please login to add feedback.

Metadata
Type
security
Severity
high
Karma
6
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Dates
submitted
2 years ago
in testing
2 years ago
in stable
2 years ago
modified
2 years ago
BZ#1585005 CVE-2018-3646 CVE-2018-3620 Kernel: hw: cpu: L1 terminal fault (L1TF)
0
0
BZ#1615998 CVE-2018-3620 CVE-2018-3646 Kernel: hw: cpu: L1 terminal fault (L1TF) [fedora-all]
0
0

Automated Test Results

Test Cases

0 0 Test Case kernel regression