Spectre Next Generation has arrived - and its worse than last time

[BarracudaUAK]

Linux patches have started landing...


Some of these have links to additional information.


Spectre Variants 3A & 4 Exposed As Latest Speculative Execution Vulnerabilities:
https://www.phoronix.com/scan.php?pa...ulnerabilities


Linux 4.9, 4.14, 4.16 Point Releases Bring SSBD For Spectre V4:
https://www.phoronix.com/scan.php?pa...9-To-4.16-SSBD


And some early benchmarks:

An Initial Look At Spectre V4 "Speculative Store Bypass" With AMD On Linux
https://www.phoronix.com/scan.php?pa...-initial&num=1


From the last link:

But for Intel users today if booting to a patched kernel you will find your system reporting it's still vulnerable to Spectre V4 and even with the spec_store_bypass_disable kernel option cannot be forced enabled: you first need an upgraded BIOS / CPU microcode. Intel is working on getting that out to motherboard vendors/partners for hitting end-users in the weeks ahead.

Just thought I would post here with what I've seen.


Barracuda