Kernel 4.14.15: The Spectre and Meltdown also affect Linux systems. Distribution development teams are reportedly preparing updated kernels, while everyone should also update their browsers.
In a previous post, we mentioned a script that can check if the Linux distribution you are using is vulnerable to the Spectre 1 and 2 vulnerabilities or Meltdown attacks.
The script checks each variant individually and displays the results. If it displays “STATUS: VULNERABLE” the system is vulnerable and needs an immediate (and if available) Kernel upgrade.
As you can see in the image above, with an older kernel, one of the systems I use remains vulnerable to the Spectre and Meltdown security vulnerabilities, at least in 2 of the 3 Variants.
But let's see the same test on kernel 4.14.15
The new kernel 4.14.15 fixes 2 of the 3 Variants of the Spectre and Meltdown vulnerabilities. Those of you using Linux, check your distribution's updates for the most recently updated kernel, and upgrade immediately.
It remains to be seen when Spectre Variant 1, the only one left, will be closed. But let's not forget the statement of Werner Haas, a representative of Cyberus Technology and a member of one of the three independent teams that discovered and reported Meltdown. The expert said that achieving comprehensive protection against Spectre is very simple and will likely involve an "ongoing process" of software fixes and hardware modifications.
“The [Spectre] attack scenario is not that simple, as it is very possible to have cross-application attacks without even OS involvement,” Haas said.
“Therefore, a blanket solution like Meltdown seems unlikely. Therefore, I expect combined fixes to hardware/software flaws along with the caveat that combating Spectre will be an ongoing process.”
