intel / intel/Intel-Linux-Processor-Microcode-Data-Files
06-5e-03 vulnerable to GDS with latest microcode
- 主要语言
- 没有语言数据
- 星标
- 818
- 派生
- 86
- PR 合并指标
- 30 天内没有已合并 PR
描述
Hi, my i5-7500 servers report they're vulnerable to GDS, even though I have the latest microcode, which Intel states should make them unaffected. Details:
```shell
root@pmc2:~# grep -r Vulnerable /sys/devices/system/cpu/vulnerabilities/
/sys/devices/system/cpu/vulnerabilities/gather_data_sampling:Vulnerable
root@pmc2:~# dmesg | grep -E 'i5-7500|GDS|microcode'
[ 0.158454] GDS: Vulnerable
[ 0.200225] smpboot: CPU0: Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz (family: 0x6, model: 0x9e, stepping: 0x9)
[ 0.471909] microcode: Current revision: 0x000000f8
[ 0.471918] microcode: Updated early from: 0x00000084
root@pmc2:~# dpkg -l intel-microcode
ii intel-microcode 3.20251111.1 amd64 Processor microcode firmware for Intel CPUs
root@pmc2:~# iucode-tool -l /lib/firmware/intel-ucode/06-9e-09.initramfs
microcode bundle 1: /lib/firmware/intel-ucode/06-9e-09.initramfs
selected microcodes:
001/001: sig 0x000906e9, pf_mask 0x2a, 2023-09-28, rev 0x00f8, size 108544
root@pmc2:~# uname -a
Linux pmc2 6.17.2-2-pve #1 SMP PREEMPT_DYNAMIC PMX 6.17.2-2 (2025-11-26T12:33Z) x86_64 GNU/Linux
```
Screenshot from the [related Intel documentation](https://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html#tab-blade-1-1) where it mentions I shouldn't be affected with firmware f8:
Am I doing something wrong, or should I just wait for a microcode update, or this processor won't receive any microcode upgrades and we should replace it? Thank you.
贡献指南
评估
这个 Issue 还没有评估数据。