Hacker News new | ask | show | jobs
by kashyapc 2956 days ago
If you are using Linux-based virtualization (KVM), besides requiring updated kernel and Intel microcode (which is not yet available), you would also need updates for relevant layers: QEMU and libvirt. Patches are posted[1][2].

Virtual Machines now need to be exposed a new Intel CPU feature flag: 'ssbd' (Speculative Store Bypass Disable).

On microcode, from Red Hat's blog post[3]:

In many (but not all) cases, full mitigation will also require updated microcode from the system microprocessor vendor. Red Hat intends to ship updated microcode as a convenience to our customers as it is made available to us. In the interim, customers are strongly advised to contact their OEM, ODM, or system manufacturer to receive this via a system BIOS update.

[1] https://www.redhat.com/archives/libvir-list/2018-May/msg0156...

[2] https://lists.gnu.org/archive/html/qemu-devel/2018-05/msg047...

[3] https://www.redhat.com/en/blog/speculative-store-bypass-expl...