Xen Project Meltdown and Spectre Technical FAQ: Difference between revisions
From Xen
Jump to navigationJump to search
Lars.kurth (talk | contribs) No edit summary |
Lars.kurth (talk | contribs) mNo edit summary |
||
| Line 10: | Line 10: | ||
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/threads.html#01798 xen/arm32: Branch predictor hardening (XSA-254 variant 2)] |
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/threads.html#01798 xen/arm32: Branch predictor hardening (XSA-254 variant 2)] |
||
* ''Note that newer versions of these patches appear at high velocity'': please always check the xen-devel@ archives for the latest version |
* ''Note that newer versions of these patches appear at high velocity'': please always check the xen-devel@ archives for the latest version |
||
== Is there any practical advice about responding to XSA-254 (also known as the 'Meltdown' and 'Spectre' vulnerabilities)? == |
== Is there any practical advice about responding to XSA-254 (also known as the 'Meltdown' and 'Spectre' vulnerabilities)? == |
||
Revision as of 16:55, 24 January 2018
Where can I find the current patch series that fixes Meltdown/SP3
Please refer to XSA-254 for more details.
Where can I find the current patch series that fixes Spectre/SP2
See
- x86: Mitigations for SP2/CVE-2017-5715/Branch Target Injection
- xen/arm64: Branch predictor hardening (XSA-254 variant 2)
- xen/arm32: Branch predictor hardening (XSA-254 variant 2)
- Note that newer versions of these patches appear at high velocity: please always check the xen-devel@ archives for the latest version
Is there any practical advice about responding to XSA-254 (also known as the 'Meltdown' and 'Spectre' vulnerabilities)?
See Respond to Meltdown and Spectre, our FAQ and XSA 254.
