Como mitigar a memória do kernel de Specter e Meltdown com vazamento de bug da CPU no OpenBSD?

Question

Falha no design do processador Intel com vazamento de memória do kernel força o novo design do Linux e do Windows

e

Lendo a memória privilegiada com um canal lateral

Em notícias recentes, as pessoas puderam ler sobre um erro de CPU com vazamento de memória do kernel.

Se estiver usando o OpenBSD, como podemos nos defender? Ou o OpenBSD não é afetado?

    

Answer 1

Código de atualização do microcódigo da CPU para amd64

link

link

When you fw_update, you'll get the firmware files.

Upon a reboot, it will attempt to update the microcode on your cpus. Maybe there isn't a new microcode. Maybe your BIOS has a copy of the microcode and installs it before booting OpenBSD.

This firmware installation is done a little late. Doing it better will require some work in the bootblocks to find the firmware files, but time is a bit short to do that right now.

The branch-target-cache flushing features added in new microcode are not being used yet. There is more code which has to be written, but again other work is happening first.

Also, Intel is saying their new microcodes sucks and people should wait a little.

"Hi, my name is Intel and I'm an cheating speculator".

Portanto, o status atual : faça um comando "fw_update" como root e reinicialize.