Intel Kernel Memory Vulnerability

Forums › Desktop computing › Intel Kernel Memory Vulnerability

firefuze

510 posts

Ultimate Geek
+1 received by user: 85

#226356 3-Jan-2018 21:58

Come across some news about a "major security vulnerability" affecting all Intel processors produced over the past (approx) 10 years.

Full details are not available as the circumstances surrounding the exploit are currently under embargo

Article here

Given it is at CPU level, it will affect all systems regardless of OS (Linux, Windows & MacOS)

The interesting point I found is regarding the supposed "degraded performance of up to 30%" when a bug fix/patch applied. Some early Linux patches are out already but are also reducing the performance of AMD processors despite not having the vulnerability.

I understand the basics of the vulnerability, but why the performance decrease? Does news of this vulnerability cause immediate concern to you?

1 | 2 | 3 | 4 | 5 | 6 | ... | 9

meow
13579 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#1928714 3-Jan-2018 22:04

The AMD side of things should be patched already: https://lkml.org/lkml/2017/12/27/2

But yes, pretty bad considering all my machines are Intel based. Also what is worse is the CEO selling all his shares which sounds like some insider trading was going on.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

TLD

908 posts

Ultimate Geek
+1 received by user: 263

#1928752 3-Jan-2018 23:07

Is this the same issue? Puget Systems has some fixes if it is.

https://www.pugetsystems.com/labs/support-hardware/Intel-Security-Flaw---Severe---ASUS-Gigabyte-ASRock-fixes-identified-1074/

Trevor Dennis
Rapaura (near Blenheim)

michaelmurfy

meow
13579 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#1928790 4-Jan-2018 05:02

The Intel press conference at CES is also going to be quite interesting...

tripp

3848 posts

Uber Geek
+1 received by user: 1220

Trusted

Lifetime subscriber

#1928792 4-Jan-2018 05:33

I am a little bit worried about it, I have tablet/laptop running a m3 which is already a little slow, up to 30% hit would make it really slow (most tests are showing 15 - 22% hit). Tablet is only 3 weeks old as well :(

Opens an interesting question on CGA and returns I guess, saying you purchased a 1Ghz M3 but with a 30% hit that takes it down to 700Mhz.

michaelmurfy

meow
13579 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#1928795 4-Jan-2018 05:41

@tripp Same with me. I'm using a Chromebook with a M3 processor... I don't think you can do much about it.

tripp

3848 posts

Uber Geek
+1 received by user: 1220

Trusted

Lifetime subscriber

#1928796 4-Jan-2018 05:49

michaelmurfy:

@tripp Same with me. I'm using a Chromebook with a M3 processor... I don't think you can do much about it.

I'm using a samsung Galaxy Tabpro S (M3 wih 4gig of ram). Only use it for onenote, emails etc.

It does leave the door open to see what happens however, might need a test case, 30% hit is big and it's not like it's only going to effect low end machines, the higher the Ghz the greater the hit.

I guess they could say that it is still running at the design speed but its the OS now slowing it down, but that is because of a design flaw in the CPU that could not be patched and a work around was done.

Interesting times, would not like to work for intel at the moment.

Mighty Ape

Shop now at Mighty Ape (affiliate link).

Stan

929 posts

Ultimate Geek
+1 received by user: 183
Inactive user

#1928797 4-Jan-2018 06:43

Probably less likely to affect normal desktop use and more likely data centers. Rc6 4.15 of the Linux kernel is supposed to remove AMD CPU performance hit hope windows is the same. really not a good time for Intel coming off a year where AMD came back in a big way.

Dratsab

3964 posts

Uber Geek
+1 received by user: 1728

Trusted

Lifetime subscriber

#1928799 4-Jan-2018 06:50

Reading the articles, Linux machines seen to averaging a 17-18% hit but the blanket approach they've taken means AMD CPUs (which don't have the vulnerability) are also being affected.

I wonder if Microsoft will [be able to] factor CPU recognition into their patch.

Hopefully the US Securities Commission is taking a long, hard look at the Intel CEO's actions.

Edit: cheers for the update re Linux @stan

Stan

929 posts

Ultimate Geek
+1 received by user: 183
Inactive user

#1928841 4-Jan-2018 09:03

I could be incorrect about rc6 I read it some place but it shouldn't be applied to AMD CPUs in the Linux kernel for long

https://www.phoronix.com/scan.php?page=news_item&px=Linux-Tip-Git-Disable-x86-PTI

Sys admins who pushed amd eypc are going to be looking good now

lokhor

2858 posts

Uber Geek
+1 received by user: 171

Trusted

#1928873 4-Jan-2018 09:52

Stan: I could be incorrect about rc6 I read it some place but it shouldn't be applied to AMD CPUs in the Linux kernel for long

https://www.phoronix.com/scan.php?page=news_item&px=Linux-Tip-Git-Disable-x86-PTI

Sys admins who pushed amd eypc are going to be looking good now

Yeah the next Kernel release will not affect AMD processors

All comments are my own opinion, and not that of my employer unless explicitly stated.

lokhor

2858 posts

Uber Geek
+1 received by user: 171

Trusted

#1928874 4-Jan-2018 09:53

firefuze:

Come across some news about a "major security vulnerability" affecting all Intel processors produced over the past (approx) 10 years.

Full details are not available as the circumstances surrounding the exploit are currently under embargo

Article here

Given it is at CPU level, it will affect all systems regardless of OS (Linux, Windows & MacOS)

The interesting point I found is regarding the supposed "degraded performance of up to 30%" when a bug fix/patch applied. Some early Linux patches are out already but are also reducing the performance of AMD processors despite not having the vulnerability.

I understand the basics of the vulnerability, but why the performance decrease? Does news of this vulnerability cause immediate concern to you?

There is a good article explaining the issue at Arstechnica: https://arstechnica.com/gadgets/2018/01/whats-behind-the-intel-design-flaw-forcing-numerous-patches/

All comments are my own opinion, and not that of my employer unless explicitly stated.

New World

Shop on-line at New World now for your groceries (affiliate link).

lokhor

2858 posts

Uber Geek
+1 received by user: 171

Trusted

#1928875 4-Jan-2018 09:54

tripp:

I am a little bit worried about it, I have tablet/laptop running a m3 which is already a little slow, up to 30% hit would make it really slow (most tests are showing 15 - 22% hit). Tablet is only 3 weeks old as well :(

Opens an interesting question on CGA and returns I guess, saying you purchased a 1Ghz M3 but with a 30% hit that takes it down to 700Mhz.

I wouldn't worry too much, its not likely to affect regular desktop performance or gaming much. Check out this article (should automatically translate): https://www.computerbase.de/2018-01/intel-cpu-pti-sicherheitsluecke/

All comments are my own opinion, and not that of my employer unless explicitly stated.

freitasm

BDFL - Memuneh
80652 posts

Uber Geek
+1 received by user: 41042

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1928922 4-Jan-2018 11:05

Intel CEO sold all his shares (which he purchased at below market, as his right), keeping only the minimum required by company bylaws, a couple of weeks before announcement https://www.fool.com/investing/2017/12/19/intels-ceo-just-sold-a-lot-of-stock.aspx

PC World Intel Processor Kernel Bug FAQ - how it affects Windows/Mac.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

freitasm

BDFL - Memuneh
80652 posts

Uber Geek
+1 received by user: 41042

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1928949 4-Jan-2018 11:30

Google now says pretty much all processors are affected, including AMD and others. The security team released more details ahead of the 9 January embargo.

Also, Android is safe if running security patch 2018-01-05. Which means millions of Android devices will never be safe and also current devices might not see an update for months.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

tripp

3848 posts

Uber Geek
+1 received by user: 1220

Trusted

Lifetime subscriber

#1928967 4-Jan-2018 12:01

freitasm:

Google now says pretty much all processors are affected, including AMD and others. The security team released more details ahead of the 9 January embargo.

Also, Android is safe if running security patch 2018-01-05. Which means millions of Android devices will never be safe and also current devices might not see an update for months.

Well sh** welcome to 2018 everyone :P

1 | 2 | 3 | 4 | 5 | 6 | ... | 9