intel / intel/Intel-Linux-Processor-Microcode-Data-Files

06-5e-03 vulnerable to GDS with latest microcode

未关闭
#109 6 条评论 2 个 reaction 已指派 0 人 在 GitHub 查看
主要语言
没有语言数据
星标
818
派生
86
PR 合并指标
30 天内没有已合并 PR

描述

Hi, my i5-7500 servers report they're vulnerable to GDS, even though I have the latest microcode, which Intel states should make them unaffected. Details:

```shell
root@pmc2:~# grep -r Vulnerable /sys/devices/system/cpu/vulnerabilities/
/sys/devices/system/cpu/vulnerabilities/gather_data_sampling:Vulnerable

root@pmc2:~# dmesg | grep -E 'i5-7500|GDS|microcode'
[ 0.158454] GDS: Vulnerable
[ 0.200225] smpboot: CPU0: Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz (family: 0x6, model: 0x9e, stepping: 0x9)
[ 0.471909] microcode: Current revision: 0x000000f8
[ 0.471918] microcode: Updated early from: 0x00000084

root@pmc2:~# dpkg -l intel-microcode
ii intel-microcode 3.20251111.1 amd64 Processor microcode firmware for Intel CPUs

root@pmc2:~# iucode-tool -l /lib/firmware/intel-ucode/06-9e-09.initramfs
microcode bundle 1: /lib/firmware/intel-ucode/06-9e-09.initramfs
selected microcodes:
001/001: sig 0x000906e9, pf_mask 0x2a, 2023-09-28, rev 0x00f8, size 108544

root@pmc2:~# uname -a
Linux pmc2 6.17.2-2-pve #1 SMP PREEMPT_DYNAMIC PMX 6.17.2-2 (2025-11-26T12:33Z) x86_64 GNU/Linux
```

Screenshot from the [related Intel documentation](https://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html#tab-blade-1-1) where it mentions I shouldn't be affected with firmware f8:

Image

Am I doing something wrong, or should I just wait for a microcode update, or this processor won't receive any microcode upgrades and we should replace it? Thank you.

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。