Xen Project Meltdown and Spectre Technical FAQ: Difference between revisions
From Xen
Jump to navigationJump to search
Lars.kurth (talk | contribs) No edit summary |
No edit summary |
||
| (2 intermediate revisions by one other user not shown) | |||
| Line 6: | Line 6: | ||
See |
See |
||
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/threads.html# |
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/threads.html#02169 x86: Mitigations for SP2/CVE-2017-5715/Branch Target Injection] |
||
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/threads.html#01365 xen/arm64: Branch predictor hardening (XSA-254 variant 2)] |
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/threads.html#01365 xen/arm64: Branch predictor hardening (XSA-254 variant 2)] |
||
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/threads.html#01798 xen/arm32: Branch predictor hardening (XSA-254 variant 2)] |
* [https://lists.xenproject.org/archives/html/xen-devel/2018-01/threads.html#01798 xen/arm32: Branch predictor hardening (XSA-254 variant 2)] |
||
* ''Note that newer versions of these patches appear at high velocity'': please always check the xen-devel@ archives for the latest version |
* ''Note that newer versions of these patches appear at high velocity'': please always check the xen-devel@ archives for the latest version |
||
== Is there any practical advice about responding to XSA-254 (also known as the 'Meltdown' and 'Spectre' vulnerabilities)? == |
== Is there any practical advice about responding to XSA-254 (also known as the 'Meltdown' and 'Spectre' vulnerabilities)? == |
||
See [[Respond to Meltdown and Spectre]], [https://blog.xenproject.org/2018/01/22/xen-project-spectre-meltdown-faq-jan-22-update/ our FAQ] and [http://xenbits.xen.org/xsa/advisory-254.html XSA 254]. |
See [[Respond to Meltdown and Spectre]], [https://blog.xenproject.org/2018/01/22/xen-project-spectre-meltdown-faq-jan-22-update/ our FAQ] and [http://xenbits.xen.org/xsa/advisory-254.html XSA 254]. |
||
== What are some dependencies between Xen features, guest types and mitigations? == |
|||
Please refer to the [https://openxt.atlassian.net/wiki/spaces/DC/pages/397967361/Meltdown+and+Spectre+mitigations+for+Xen+Linux+and+Windows OpenXT] spreadsheet, [https://docs.google.com/spreadsheets/d/1h9z98xW5COh2YuH7nOeTsjLGZ-k_Cl2FmLEiXOyeyZQ/htmlview Meltdown and Spectre Exposure Analysis: Xen, Linux & Windows]. |
|||
[[Category:Security]] |
[[Category:Security]] |
||
Latest revision as of 14:42, 6 February 2018
Where can I find the current patch series that fixes Meltdown/SP3
Please refer to XSA-254 for more details.
Where can I find the current patch series that fixes Spectre/SP2
See
- x86: Mitigations for SP2/CVE-2017-5715/Branch Target Injection
- xen/arm64: Branch predictor hardening (XSA-254 variant 2)
- xen/arm32: Branch predictor hardening (XSA-254 variant 2)
- Note that newer versions of these patches appear at high velocity: please always check the xen-devel@ archives for the latest version
Is there any practical advice about responding to XSA-254 (also known as the 'Meltdown' and 'Spectre' vulnerabilities)?
See Respond to Meltdown and Spectre, our FAQ and XSA 254.
What are some dependencies between Xen features, guest types and mitigations?
Please refer to the OpenXT spreadsheet, Meltdown and Spectre Exposure Analysis: Xen, Linux & Windows.
