mirror of
https://github.com/speed47/spectre-meltdown-checker.git
synced 2026-09-10 12:53:58 +02:00
Compare commits
41
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
835d023245 | ||
|
|
ed7f348f83 | ||
|
|
84894f96c6 | ||
|
|
03cc4ffeb1 | ||
|
|
1ce22924f3 | ||
|
|
1db12cd347 | ||
|
|
c107f2b2ea | ||
|
|
c277a7a443 | ||
|
|
26cf31b282 | ||
|
|
68116d87fd | ||
|
|
3f4801e6a7 | ||
|
|
9a3688b6fd | ||
|
|
c060a2d2c9 | ||
|
|
0c89d162a3 | ||
|
|
02fa416bab | ||
|
|
1c067add59 | ||
|
|
fe0d3f49f4 | ||
|
|
00bb4a951c | ||
|
|
43d5b77885 | ||
|
|
78a6e4a418 | ||
|
|
5af1a9fec9 | ||
|
|
b93027640f | ||
|
|
5c27284119 | ||
|
|
f2e5999fc0 | ||
|
|
25f20b8860 | ||
|
|
77e3dbd6b2 | ||
|
|
8a6f9d5d63 | ||
|
|
73b67b4a80 | ||
|
|
ea6b8efd18 | ||
|
|
24d92540a7 | ||
|
|
f2d871acff | ||
|
|
553a9ec60f | ||
|
|
83ebe2f75f | ||
|
|
75ad60f42a | ||
|
|
931c955765 | ||
|
|
c5ef0c488a | ||
|
|
a05f8aab34 | ||
|
|
99301d1cbb | ||
|
|
f9c3d19f72 | ||
|
|
8389d9593c | ||
|
|
3a822fdcf2 |
@@ -13,7 +13,7 @@
|
|||||||
#
|
#
|
||||||
# Stephane Lesimple
|
# Stephane Lesimple
|
||||||
#
|
#
|
||||||
VERSION='26.36.0730588'
|
VERSION='26.36.0808753'
|
||||||
|
|
||||||
# --- Common paths and basedirs ---
|
# --- Common paths and basedirs ---
|
||||||
readonly VULN_SYSFS_BASE="/sys/devices/system/cpu/vulnerabilities"
|
readonly VULN_SYSFS_BASE="/sys/devices/system/cpu/vulnerabilities"
|
||||||
@@ -1219,6 +1219,7 @@ is_cpu_affected() {
|
|||||||
06-c5-02/82,0000011b
|
06-c5-02/82,0000011b
|
||||||
06-c6-02/82,0000011b
|
06-c6-02/82,0000011b
|
||||||
06-bd-01/80,00000125
|
06-bd-01/80,00000125
|
||||||
|
06-55-07/bf,05003901
|
||||||
06-55-0b/bf,07002b01
|
06-55-0b/bf,07002b01
|
||||||
06-8f-07/87,2b000661
|
06-8f-07/87,2b000661
|
||||||
06-8f-08/87,2b000661
|
06-8f-08/87,2b000661
|
||||||
@@ -1381,9 +1382,9 @@ is_cpu_affected() {
|
|||||||
if [ -n "$cpupart" ] && [ -n "$cpuarch" ]; then
|
if [ -n "$cpupart" ] && [ -n "$cpuarch" ]; then
|
||||||
# Cortex-R7 and Cortex-R8 are real-time and only used in medical devices or such
|
# Cortex-R7 and Cortex-R8 are real-time and only used in medical devices or such
|
||||||
# I can't find their CPU part number, but it's probably not that useful anyway
|
# I can't find their CPU part number, but it's probably not that useful anyway
|
||||||
# model R7 R8 A8 A9 A12 A15 A17 A57 A72 A73 A75 A76 A77 Neoverse-N1 Neoverse-V1 Neoverse-N1 Neoverse-V2
|
# model R7 R8 A8 A9 A12 A15 A17 A57 A72 A73 A75 A76 A77 Neoverse-N1 Neoverse-V1 Neoverse-N1 Neoverse-V2 Neoverse-V3 Neoverse-V3AE
|
||||||
# part ? ? c08 c09 c0d c0f c0e d07 d08 d09 d0a d0b d0d d0c d40 d49 d4f
|
# part ? ? c08 c09 c0d c0f c0e d07 d08 d09 d0a d0b d0d d0c d40 d49 d4f d84 d83
|
||||||
# arch 7? 7? 7 7 7 7 7 8 8 8 8 8 8 8 8 8 8
|
# arch 7? 7? 7 7 7 7 7 8 8 8 8 8 8 8 8 8 8 8 8
|
||||||
#
|
#
|
||||||
# Whitelist identified non-affected processors, use vulnerability information from
|
# Whitelist identified non-affected processors, use vulnerability information from
|
||||||
# https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
|
# https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability
|
||||||
@@ -1434,13 +1435,13 @@ is_cpu_affected() {
|
|||||||
_infer_immune variant3a
|
_infer_immune variant3a
|
||||||
_set_vuln variant4
|
_set_vuln variant4
|
||||||
pr_debug "checking cpu$i: armv8 A76/A77/NeoverseN1 non affected to variant 2, 3 & 3a"
|
pr_debug "checking cpu$i: armv8 A76/A77/NeoverseN1 non affected to variant 2, 3 & 3a"
|
||||||
elif [ "$cpuarch" = 8 ] && echo "$cpupart" | grep -q -w -e 0xd40 -e 0xd49 -e 0xd4f; then
|
elif [ "$cpuarch" = 8 ] && echo "$cpupart" | grep -q -w -e 0xd40 -e 0xd49 -e 0xd4f -e 0xd84 -e 0xd83; then
|
||||||
_set_vuln variant1
|
_set_vuln variant1
|
||||||
_infer_immune variant2
|
_infer_immune variant2
|
||||||
_infer_immune variant3
|
_infer_immune variant3
|
||||||
_infer_immune variant3a
|
_infer_immune variant3a
|
||||||
_infer_immune variant4
|
_infer_immune variant4
|
||||||
pr_debug "checking cpu$i: armv8 NeoverseN2/V1/V2 non affected to variant 2, 3, 3a & 4"
|
pr_debug "checking cpu$i: armv8 NeoverseN2/V1/V2/V3/V3AE non affected to variant 2, 3, 3a & 4"
|
||||||
elif [ "$cpuarch" -le 7 ] || { [ "$cpuarch" = 8 ] && [ $((cpupart)) -lt $((0xd07)) ]; }; then
|
elif [ "$cpuarch" -le 7 ] || { [ "$cpuarch" = 8 ] && [ $((cpupart)) -lt $((0xd07)) ]; }; then
|
||||||
_infer_immune variant1
|
_infer_immune variant1
|
||||||
_infer_immune variant2
|
_infer_immune variant2
|
||||||
@@ -1501,14 +1502,14 @@ is_cpu_affected() {
|
|||||||
# - arm64 (CVE-2020-13844): Cortex-A32/A34/A35/A53/A57/A72/A73 confirmed affected,
|
# - arm64 (CVE-2020-13844): Cortex-A32/A34/A35/A53/A57/A72/A73 confirmed affected,
|
||||||
# and broadly all speculative Armv8-A cores. No kernel mitigation merged.
|
# and broadly all speculative Armv8-A cores. No kernel mitigation merged.
|
||||||
# Part numbers: A32=0xd01 A34=0xd02 A53=0xd03 A35=0xd04 A57=0xd07 A72=0xd08 A73=0xd09
|
# Part numbers: A32=0xd01 A34=0xd02 A53=0xd03 A35=0xd04 A57=0xd07 A72=0xd08 A73=0xd09
|
||||||
# Plus later speculative cores: A75=0xd0a A76=0xd0b A77=0xd0d N1=0xd0c V1=0xd40 N2=0xd49 V2=0xd4f
|
# Plus later speculative cores: A75=0xd0a A76=0xd0b A77=0xd0d N1=0xd0c V1=0xd40 N2=0xd49 V2=0xd4f V3=0xd84 V3AE=0xd83
|
||||||
if is_intel || is_amd; then
|
if is_intel || is_amd; then
|
||||||
_infer_vuln sls
|
_infer_vuln sls
|
||||||
elif [ "$cpu_vendor" = ARM ]; then
|
elif [ "$cpu_vendor" = ARM ]; then
|
||||||
for cpupart in $cpu_part_list; do
|
for cpupart in $cpu_part_list; do
|
||||||
if echo "$cpupart" | grep -q -w -e 0xd01 -e 0xd02 -e 0xd03 -e 0xd04 \
|
if echo "$cpupart" | grep -q -w -e 0xd01 -e 0xd02 -e 0xd03 -e 0xd04 \
|
||||||
-e 0xd07 -e 0xd08 -e 0xd09 -e 0xd0a -e 0xd0b -e 0xd0c -e 0xd0d \
|
-e 0xd07 -e 0xd08 -e 0xd09 -e 0xd0a -e 0xd0b -e 0xd0c -e 0xd0d \
|
||||||
-e 0xd40 -e 0xd49 -e 0xd4f; then
|
-e 0xd40 -e 0xd49 -e 0xd4f -e 0xd84 -e 0xd83; then
|
||||||
_set_vuln sls
|
_set_vuln sls
|
||||||
fi
|
fi
|
||||||
done
|
done
|
||||||
|
|||||||
Reference in New Issue
Block a user