Xen Project Meltdown and Spectre Technical FAQ

Where can I find the current patch series that fixes Meltdown/SP3

Please refer to XSA-254 for more details.

Where can I find the current patch series that fixes Spectre/SP2

See

• x86: Mitigations for SP2/CVE-2017-5715/Branch Target Injection
• xen/arm64: Branch predictor hardening (XSA-254 variant 2)
• xen/arm32: Branch predictor hardening (XSA-254 variant 2)
• Note that newer versions of these patches appear at high velocity: please always check the xen-devel@ archives for the latest version

Is there any practical advice about responding to XSA-254 (also known as the 'Meltdown' and 'Spectre' vulnerabilities)?

See Respond to Meltdown and Spectre, our FAQ and XSA 254.