Bug 643338

Summary:	sys-kernel/gentoo-sources-4.9.74, sys-kernel/gentoo-sources-4.4.109: Stabilize kernels with KPTI patches
Product:	Gentoo Linux	Reporter:	QIN Yuhao <qinq_net>
Component:	Keywording	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	kfm
Priority:	Normal
Version:	unspecified
Hardware:	AMD64
OS:	Linux
URL:	https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw
Whiteboard:
Package list:		Runtime testing required:	---

Description QIN Yuhao 2018-01-04 00:26:12 UTC

There has been a critical design vulnerability in all Intel processors, which has recently caused all long-term Linux versions to apply the KPTI (formerly called KAISER) patch. It would fix such bug by totally separate kernel and user-mode pages, causing compilation performance to suffer from up to 30% penalty. The patch was applied to 4.14.11, 4.9.74 and 4.4.109. We should stabilize 4.9.74 and 4.4.109 and even mask those beforehand to ensure security of our systems.

Reproducible: Always

Comment 1 kuzetsa CatSwarm (kuza for short) 2018-01-04 00:46:13 UTC

https://bugs.gentoo.org/643228

Comment 2 kfm 2018-01-04 01:02:56 UTC

That would seem premature as 4.4.109 and 4.9.74 do not contain the necessary patches. They are accumulating in queue-4.4 and queue-4.9 at the time of writing.

Comment 3 kfm 2018-01-04 15:33:11 UTC


*** This bug has been marked as a duplicate of bug 643352 ***