Skip to content

Instantly share code, notes, and snippets.

@xanderificnl

xanderificnl/cpu-vulns.md

Created April 1, 2023 14:50
Show Gist options
  • Save xanderificnl/122a621b763ffb6101985960a8d4c715 to your computer and use it in GitHub Desktop.
Save xanderificnl/122a621b763ffb6101985960a8d4c715 to your computer and use it in GitHub Desktop.
Download ZIP
Check for CPU vulnerabilities
Raw
cpu-vulns.md 
$ grep -ri mitigation /sys/devices/system/cpu/vulnerabilities/* | cut -d/ -f7- | column -t -s: -l3 -H2
itlb_multihit       Mitigation: VMX disabled
l1tf                PTE Inversion; VMX: conditional cache flushes, SMT disabled
mds                 Clear CPU buffers; SMT disabled
meltdown            PTI
mmio_stale_data     No mitigations
spec_store_bypass   Speculative Store Bypass disabled via prctl
spectre_v1          usercopy/swapgs barriers and __user pointer sanitization
spectre_v2          Retpolines, IBPB: conditional, IBRS_FW, STIBP: disabled, RSB filling, PBRSB-eIBRS: Not affected
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment