Howto patch Spectre Vulnerability CVE-2017-5753/CVE-2017-5715 on Linux

[glennrocksvb]

A very serious security problem has been found in the Intel/AMD/ARM CPUs. Spectre CPU Vulnerability CVE-2017-5753/CVE-2017-5715 breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the safety checks of said best practices actually increase the attack surface and may make applications more susceptible to Spectre. How do I protect my Linux server and laptop/desktop against such attack?

A very serious security problem has been found and patched in the Linux kernel. It was announced on 3rd January 2018. It was independently discovered and reported by various teams including Google Project Zero. Spectre is harder to exploit than Meltdown CPU bug, but it is also harder to mitigate.

[glennrocksvb]

This is a serious matter and certainly affects your hosting. Have you heard of your host about their plans on how to apply the fix to these Meltdown and Spectre Intel bugs?

Here's the update from my host Linode.