March 4, 2018
8:54 p.m.
On Sun, Mar 04, 2018 at 03:20:48PM -0500, Ruben Safir wrote:
On 03/04/2018 01:31 PM, valdis.kletnieks@vt.edu wrote:
Note that saying "The CPU isn't vulnerable to Meltdown/Spectre, therefor the 4.1 kernel is OK" is *incredibly* wrong.
For the record, since 4.1 came out, there's been at *least* a dozen security issues in the Linux kernel that have been a *lot* scarier for security professionals than the Meltdown/Spectre issue. That only got any news coverage because it was an actual hardware design flaw that was believed to be difficult to easily fix with software changes...
By this standard, it is necessary to update the kernel and reboot nearly every week. Is that right?
That is correct. greg k-h