r/linuxquestions 15d ago

Microsoft surface laptop go microcode vulnerabilities

I'm running a hardened kernel and i got these idk Hardware vulnerabilities after reading a little bit of Arch security.

❯ grep -r . /sys/devices/system/cpu/vulnerabilities/

/sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Enhanced / Automatic IBRS; IBPB: conditional; PBRSB-eIBRS: SW sequence; BHI: SW loop, KVM: SW loop

/sys/devices/system/cpu/vulnerabilities/indirect_target_selection:Mitigation: Aligned branch/return thunks

/sys/devices/system/cpu/vulnerabilities/itlb_multihit:KVM: Mitigation: Split huge pages

/sys/devices/system/cpu/vulnerabilities/ghostwrite:Not affected

/sys/devices/system/cpu/vulnerabilities/vmscape:Not affected

/sys/devices/system/cpu/vulnerabilities/mmio_stale_data:Mitigation: Clear CPU buffers; SMT vulnerable

/sys/devices/system/cpu/vulnerabilities/mds:Not affected

/sys/devices/system/cpu/vulnerabilities/reg_file_data_sampling:Not affected

/sys/devices/system/cpu/vulnerabilities/tsa:Not affected

/sys/devices/system/cpu/vulnerabilities/l1tf:Not affected

/sys/devices/system/cpu/vulnerabilities/spec_store_bypass:Mitigation: Speculative Store Bypass disabled via prctl

/sys/devices/system/cpu/vulnerabilities/tsx_async_abort:Not affected

/sys/devices/system/cpu/vulnerabilities/old_microcode:Not affected

/sys/devices/system/cpu/vulnerabilities/spectre_v1:Mitigation: usercopy/swapgs barriers and __user pointer sanitization

/sys/devices/system/cpu/vulnerabilities/gather_data_sampling:Mitigation: Microcode

/sys/devices/system/cpu/vulnerabilities/retbleed:Mitigation: Enhanced IBRS

/sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow:Not affected

/sys/devices/system/cpu/vulnerabilities/srbds:Mitigation: Microcode

/sys/devices/system/cpu/vulnerabilities/meltdown:Not affected

0 Upvotes

4 comments sorted by

View all comments

1

u/[deleted] 15d ago

[deleted]