Zenbleed vulnerability

Lounge
1

Looks like I am lucky. All my CPUs are either too new or too old to be impacted by this one.

Either way, looks like it is patched in the kernel and will be in an upcoming release.

8 Likes
2

Thanks, looks like i am spared of this as well :smiley:

2 Likes
3 
$ grep cpu.family /proc/cpuinfo|sed 1q
cpu family	: 23

23==17h, so I’ll be looking for the firmware upgrade for my laptop, and looks like 2023-12, so I’ll be waiting a long time.

My 7302P seems to have AGESA out now. I wonder if I have to wait for SMC to release a BIOS upgrade or if the linux-firmware package will have something sooner, and if it will work? I don’t know enough about how linux-firmware integrates, anyone with ideas around this?

Patched in kernel, but with performance impact vs firmware update and I assume minimal performance impact.

4

Thanks for the tip. It looks like i’m not affected.:slight_smile:

5

it is already released:
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.6

https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.41

6

linux 6.4.6.arch1-1 already in core-testing: https://archlinux.org/packages/core-testing/x86_64/linux/

7

I’m on Intel, lucky me! :smiley:
They have about 1000 other vulnerabilities :rofl:

1 Like
8

AMD Ryzen 7 5800H (Mobile CPU) seems not impacted luckily

9

Thanks for the information! Mr. Dalto :angel:

I replaced the ryzen 3s 3100 for the ryzen 7s 2700x (used CPUs for an economical price … ) in the calculating machines during the last year.

I think I’m also OK :astonished:

:wave:

10

there is also firmware update coming ( microcode )

11

linux-firmware 20230625.ee91452d-5 in core-testing:

https://archlinux.org/packages/core-testing/any/linux-firmware/

Amazing how things move fast! You gotta love Arch, btw!

1 Like
12

Yes, exploring arch / eos for my laptop / desktop for more up to date software, and ubuntu was irking me, and time for a change too. Must try nixos at some point too, declarative nature looks interesting.

13

The microcode update is only fixing EPYC server processors though.
Until december the kernel patch will have to do it :unamused:

2 Likes
14

Ah … what a bummer!

Thanks for the info!

15

Me too, I have been wanting to do this but so far I haven’t got around to do it. At some point, hopefully!