From 6f58e3c81dec943d732f28bf246c2ec800dae055 Mon Sep 17 00:00:00 2001 From: Thomas Lamprecht Date: Wed, 15 May 2019 08:54:11 +0200 Subject: [PATCH] update sources to Ubuntu-4.15.0-50.54 It mainly comes with some mitigation for MDS[1][3][4][5], for best result a microupdate of the CPU is required, else the kernel falls back to some "best effort mitigation", trying to clear the CPU buffers on kernel/userspace, hypervisor/guest and C-state (idle) transitions. With this applied you will have a new file in sysfs to get the mitigation state of the server regarding MDS: $ cat /sys/devices/system/cpu/vulnerabilities/mds Microcode updates should come available in stretch with 3.20190514.1~deb9u1 [2] version currently only tagged[2], but not yet released. [1]: https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html#mitigation-strategy [2]: https://salsa.debian.org/hmh/intel-microcode/commits/debian/3.20190514.1_deb9u1 [3]: https://mdsattacks.com/ [4]: https://cpu.fail/ [5]: https://www.intel.com/content/www/us/en/architecture-and-technology/mds.html Signed-off-by: Thomas Lamprecht --- submodules/ubuntu-bionic | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/submodules/ubuntu-bionic b/submodules/ubuntu-bionic index c5b0662..410b374 160000 --- a/submodules/ubuntu-bionic +++ b/submodules/ubuntu-bionic @@ -1 +1 @@ -Subproject commit c5b0662fc7ac67d5d5fc62f3bbdbeac241f45b5c +Subproject commit 410b374872d719c06d22dc5d735b100f65199273