Spectre and Meltdown

I have a question around my head… After this fix, if performance wil decrease, it could be that reduce some innecessary o heavy CPU processes will keep de general speed and performance? Being forced to be more slim? Or any changes that we can do wouldn’t make up for preserve it?
I’m confused…

With this redising in the kernel, every time a program makes a call into the kernel that call will be a little more "expensive". Disk i/o, sending data to the network, opening a file, setting and reading time, device management... If a program does nothing but system calls (like benchmarks) it will take twice as long. Programs that don't make calls that much, maybe 2-3%. Servers maybe 20-30%.

4 Likes

Should give a new lease of life for Ubuntu Mate PowerPC users! No mention of Motorola Power PC chips so far…

@Wimpy

So far nobody has asked the big questions. Why?
Have I missed the news? If so, I am sorry for this post.

Is Ubuntu Mate safe from these problems?
If so which ones?
If not what is being done about it?
When can we expect the fix?

Next let’s quit calling them bugs and call them what they are design flaws.
Plus notice that most of the chip manufactures are drinking from the same cup since they all have the same disease.

Ubuntu are releasing patches tomorrow. You can track progress here:

If you’re interested in this topic I recommend you educate yourselves. The article written by Eben Upton over at the Raspberry Pi Foundation is excellent, and also explains how some CPUs are not actually affected.

6 Likes

Thanks for the link and update.

Running UM16.04 here.
Kernel 4.0.4.108 don't boot in my i3 machine.
Going back to 4.0.4.104 for now...
(Nvidia also updated yesterday, but seems to work fine with 4.0.4.104)

Ubuntu-Mate patches available for most recent releases this morning.

I’ve installed on 17.10 (Kernel 4.13.0-25 after application), with no immediately apparent issues.

However for my 16.04.03 installation there appears to be no Meltdown patches (there are others) available. The 16.04 Meltdown patches apply only to Kernel 4.4 for 16.06 thru 16.04.02.

There appear to be no Meltdown patches for 16.04.03 as this uses the 4.10.0-42 HWE kernel, which is not being patched as it EOL’s next month along with 17.10.

The Rolling HWE will apparently go to 4.13 ‘early’.

But there is no mention of fresh 16.04.03 installs which have 4.10 as the initially installed kernel, and thus presumably is not a Rolling HWE release. Or is it?

Wouldn’t you know it … Just after I posted the above, 4.13 updates came through! Updating now.

Install of 16.04.03 Meltdown update failed with already reported issue Bug #1741671

So I would recommend switching from nVidia to Nouveau driver first - before applying the update.

But if you forget: I was able to switch back to Nouveau before doing the Restart to finish the Security update; then restart, and finally re-enable nVidia 340.012. Without problem.

1 Like

I never got any update, Im still on 4.10.0-42-generic and it says “No updates available”

I am using Ubuntu Mate LTS 16.04.03

When will my system be getting the patch?

4.0.4.109 boots fine :slight_smile:

1 Like

As I understand the Ubuntu kernel system, one of these meta packages should have been installed initially:

linux-generic-hwe-16.04-edge (at 4.13.0.26)
linux-generic-hwe-16.04 (at 4.13.0.25)
linux-generic (Original ISO at 4.4.0.109)

The “hwe” ones were at your 4.10 level at one time but should have updated you to 4.13 before these recent changes. I don’t think 4.10 or 4.11 will get any changes.

Perhaps you did something manually or Ubuntu’s system broke some other way. For example, If you remove an active kernel the meta package points to, it will also insist on removing the meta package.

Hope this helps anyone else with similar issues. BTW, no meta package = no kernel updates. The individual version-numbered packages do NOT update by themselves.

HTH

4.4.0.108 on my Dell XPS-8700 desktop tower would NOT shut down power-off or reboot. Today came 4.4.0.109 and that problem is gone. No other issues seen.

It’s against my grain to update kernel AND nVidia drivers at the same time and glad I didn’t. The nVidia change affects boot screens a little bit, nothing important, just different.

Hello, if you want to know if you are infected:

git clone https://github.com/speed47/spectre-meltdown-checker.git
cd spectre-meltdown-checker/
sudo ./spectre-meltdown-checker.sh
2 Likes

2 posts were split to a new topic: Hibernation broken in kernel 4.13.0-25

I ran that checker a couple of days ago on my Atom N455 and it said my netbook computer was fully vulnerable to Meltdown and Sprectre (contrary to what I’d read about old Atom chips in several places online). I don’t think the script comprehends my old Atom, but I don’t have time to fully investigate the script. Since then I found Intel’s Impacted Intel Systems list and the N series Atom is, as I suspected, allegedly not impacted:

https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html#4

I’ve done a little research, because my Mac Mini PPC G4 (7447A CPU) is running Ubuntu Mate. There’s far less attention given to PPC than the Intel and AMD chips, which is both good and bad (good because attacks are less likely to be widespread but bad because there’s less reliable information about their vulnerability).

I feel pretty good about the G4/7447A but there is at least one claim of a memory security breech demonstration on a G5. Read this page along with the comments:

https://tenfourfox.blogspot.com/2018/01/more-about-spectre-and-powerpc-or-why.html

There’s also much less attention being focused in 32-bit Intel and AMD cpus. From what I’ve read in other GNU/Linux forums, patches for 32-bit will be much more difficult than 64-bit!

Here’s a link about 32-bit from a dev in the Debian forum:

http://forums.debian.net/viewtopic.php?f=3&t=135775&p=663740&hilit=thomas+kpti#p663740

For what it is worth: I upgraded UM 16.04 on my old T410 and for regular office work, surfing and streaming I do not experience any performance issues at all. But I would be interested in hearing if anyone has either with UM or other OSes!