1

I use an older 32-bit Intel Pentium Computer which is not getting any microcode updates. Anyway the PC is working just fine and I want to protect it against spectre/meltdown vulnerabilities. Is there any Linux distribution providing patches? As I know from the Ubuntu wiki-page only Spectre Variant 1 is addressed by the Ubuntu team.

2

On 32-bit x86, both Spectre variants are fixed, including in Ubuntu. Fixes for Meltdown are still being worked on; as far as I know, no distribution is shipping them, although I haven’t checked openSUSE (the patches are being developed by SUSE so they might show up there earlier).

  • As I can see from the ubuntu wiki page the spectre variant 2 is fixed using retpoline. For 64 bit versions also microcode updates are required which suggests me that retpoline only is not sufficient enough (Table "Kernel mitigations")? For the 32 bit there are no microcode unfortunately available. – Bastian May 15 '18 at 18:25
  • No, retpoline is sufficient, for software rebuilt to use it; currently that’s only the kernel, but that’s already sufficient to mitigate known attacks. Firefox has also been updated to address the issues there. – Stephen Kitt May 15 '18 at 18:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.