Linux Fixes Botched SRSO Mitigation For AMD Zen 3 / Zen 4

[avis]

CPUs do not explode due to these vulnerabilities.

You're not comparing apple with oranges, you're comparing refrigerators with crocodiles.

[EphemeralEft]

Yikes.

[Weasel]

absolutely no such requirement exists. Car manufacturers pay compensation when their car causes harm to user. So why not CPU manufacturers?

If a car suddenly explodes due to design fault and hurts you there will be compensations. If your cpu exposes your encryption key due to design fault and causes loss off trillions, why is the cpu manufacturer not responsible?

The CPU doesn't expose shit.

The software you run does.

Sounds like it's your problem.

[Weasel]

CONFIG_SPECULATION_MITIGATIONS=n

[varikonniemi]

sounds like you think x86-64 spec says that a concurrently running thread should be able to know details about another thread?

[blackshard]

sounds like you think x86-64 spec says that a concurrently running thread should be able to know details about another thread?

It does not say it doesn't. Actually, the x86-64 specs does not say anything about concurrent thread scope. Processors do not even know what a thread is.
Those processor are not out-of-specs, because they do what the specs says, yet they have "unexpected behaviour" in some out-of-spec corner cases.

[loganj]

im curios if they actually fix more of the vulnerability issues or if they actually make the "workaround" to not slow the system as much as before?

[User29]

The specifications cover clock speeds, power levels, supported instructions, etc. The CPUs still do all the things the actual specifications cover. ..

but you can't use them responsibly at those specs. if you have to apply mitigations then you lose the performance you have paid for. like downtuning the 500hp car to 400. how will you be compensated? did the price of the affected cpus dropped significantly to represent the performance loss?

[david-nk]

if you have to apply mitigations then you lose the performance you have paid for.

There is no reason to apply the mitigations if there is no actionable attack vector for them on your system.

if you have to apply mitigations then you lose the performance you have paid for.

I do not know where you got the idea that you paid for any performance.

how will you be compensated?

You won't.

[User29]

There is no reason to apply the mitigations if there is no actionable attack vector for them on your system.


I do not know where you got the idea that you paid for any performance.


You won't.

You are just trolling, right? ... Right?