z****n
发帖数: 3189 | 1 牙膏厂的公关部门是阿三掌管的？感觉老美做错事不会这么不干脆阿
https://lkml.org/lkml/2018/1/3/797
From Linus Torvalds <>
Date Wed, 3 Jan 2018 15:51:35 -0800
Subject Re: Avoid speculative indirect calls in kernel
share 0
share 97
On Wed, Jan 3, 2018 at 3:09 PM, Andi Kleen <[email protected]> wrote:
> This is a fix for Variant 2 in
> https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-
with-side.html
>
> Any speculative indirect calls in the kernel can be tricked
> to execute any kernel code, which may allow side channel
> attacks that can leak arbitrary kernel data.
Why is this all done without any configuration options?
A *competent* CPU engineer would fix this by making sure speculation
doesn't happen across protection domains. Maybe even a L1 I$ that is
keyed by CPL.
I think somebody inside of Intel needs to really take a long hard look
at their CPU's, and actually admit that they have issues instead of
writing PR blurbs that say that everything works as designed.
.. and that really means that all these mitigation patches should be
written with "not all CPU's are crap" in mind.
Or is Intel basically saying "we are committed to selling you shit
forever and ever, and never fixing anything"?
Because if that's the case, maybe we should start looking towards the
ARM64 people more.
Please talk to management. Because I really see exactly two possibibilities:
- Intel never intends to fix anything
OR
- these workarounds should have a way to disable them.
Which of the two is it?
Linus | c****f
发帖数: 36 | 2 不然咋办？召回所有cpu然后给替换新的？那intel直接宣布破产算了
【在 z****n 的大作中提到】
: 牙膏厂的公关部门是阿三掌管的？感觉老美做错事不会这么不干脆阿
: https://lkml.org/lkml/2018/1/3/797
:
: From Linus Torvalds <>
: Date Wed, 3 Jan 2018 15:51:35 -0800
: Subject Re: Avoid speculative indirect calls in kernel
: share 0
: share 97
: On Wed, Jan 3, 2018 at 3:09 PM, Andi Kleen <[email protected]> wrote:
: > This is a fix for Variant 2 in
| y*d
发帖数: 2226 | 3
CPU是不需要召回的，卖CPU的时候都有一张单子，上面写着CPU是高科技产品，不能保
证没有瑕疵。如有瑕疵，买家自负，牙膏厂无责。
不过，当年INTC确实召回了有浮点运算问题的处理器。
https://en.wikipedia.org/wiki/Pentium_FDIV_bug
【在 c****f 的大作中提到】
: 不然咋办？召回所有cpu然后给替换新的？那intel直接宣布破产算了
|
|
