FreeBSD MDS Mitigation

Kevin via freebsd-security <[email protected]>
Newsgroups gmane.os.freebsd.security.general
Message-ID <1-e0UcMiG_xiNHOUE9o3duPx3uN6Loigx376zYIhPFYNE-khNPR1vB-gu5TAG-L_V9AL7gNrWsyurZ8bBcW1zMayEPgkl2SpalOGkrGfTEE=@protonmail.ch>
Hello list. I am reading this page about FreeBSD security [ https://vez.mrsk.me/freebsd-defaults.html ] and it says the Intel MDS mitigation is off by default. So I tried.

% sysctl hw.mds_disable_state
hw.mds_disable_state: inactive

Now I see the instructions in the advisory, but what about anyone who didn't? Or who did a new install and didn't read past advisories?

I have an Intel CPU that is vulnerable. By applying the update and installing the microcode package, I thought I was safe.

Why? Why does FreeBSD let its users be vulnerable?
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.