Re: Might be worth while to update your kernel

"Xi Ruoyao" ([email protected] via lfs-support Mailing List) <[email protected]> Fri, 12 Sep 2025 09:14:18 +0800
Newsgroups gmane.linux.lfs.support
Message-ID <[email protected]>
On Thu, 2025-09-11 at 20:11 +0000, Richard wrote:

Quote from the book:

The Linux kernel is updated quite frequently, many times due to
discoveries of security vulnerabilities. The latest available stable
kernel version may be used, unless the errata page says otherwise.

>   │ Enable mitigation for VMSCAPE attacks. VMSCAPE is a hardware
> security
> │
>   │ vulnerability on Intel and AMD CPUs that may allow a guest to do
> │
>   │ Spectre v2 style attacks on userspace hypervisor.

/* snip */

And... You can see it'll only make a difference if you run a VM on LFS
(NOT running LFS in a VM) and run some untrusted code in the VM.  I
doubt if there are too many LFS users doing so.

-- 
Xi Ruoyao <[email protected]>

-- 
http://lists.linuxfromscratch.org/sympa/info/lfs-support
Unsubscribe: See the above information page