Intel Ivybridge + Haswell Require Security Mitigation For Graphics Hardware Flaw

[phoronix]

Phoronix: Intel Ivybridge + Haswell Require Security Mitigation For Graphics Hardware Flaw

Earlier today we were first to report on an Intel graphics driver patch mitigating a "Gen9" graphics hardware vulnerability. Details on that new security disclosure are coming to light and it turns out older Intel "Gen" graphics are also affected...

http://www.phoronix.com/scan.php?page=news_item&px=Intel-Gen7-Graphics-Flaw

[tildearrow]

Come on...

[Yorper]

Just tried to build 5.4.12 with the latest patch for gen7 and it fails to build. It seems to need some tweaking.

[Michael]

Just tried to build 5.4.12 with the latest patch for gen7 and it fails to build. It seems to need some tweaking.

Try 5.5 Git.... IIRC, I think they said the Gen7 patch wouldn't be backported.

[bearoso]

Come on...

I know. This “vulnerability” is completely unfeasible to exploit in the first place. Like the others, it’s only an issue for virtualization providers, but no one’s going to provide virtual services for integrated graphics. Then it’s turned on by default, so it’s a detriment to many users in order to provide security for a nonexistent use case.

How about kernel defaults prioritizing personal computers instead of virtualization services? Oh, wait, all kernel developers now work for companies whose main business model is virtualization.

[Yorper]

Try 5.5 Git.... IIRC, I think they said the Gen7 patch wouldn't be backported.

I’m not saying you’re wrong about the backporting statement, I have no idea 🤷. But that seems a little stupid to me if true, given the fact 5.4 is an LTS and the relative severity of the issue. Good old intel. 🤦

[starshipeleven]

I know. This “vulnerability” is completely unfeasible to exploit in the first place. Like the others, it’s only an issue for virtualization providers,

Not really. Like others it can be used to let a program snoop in another's allocated RAM.

Oh, wait, all kernel developers now work for companies whose main business model is virtualization.

"now" lol. It's been a while

[wizard69]

Come on...

Pretty much what went through my mind when I read the headline. While I know it is an issue one has to laugh a bit at people concerned with Intel’s management processor when the whole product has more holes than Swiss cheese.

[Aryma]

great my Haswell is not only will not get new update and now i will have to deal with slowdown come from patch mitigation

[timofonic]

Like other mitigations...

Can it be disabled?