Shulou(Shulou.com)06/01 Report--

This article mainly shows you "how to check your Linux system for Meltdown or Spectre loopholes", the content is easy to understand, clear, hope to help you solve your doubts, the following let the editor lead you to study and learn "how to check your Linux system whether there are Meltdown or Spectre vulnerabilities" this article.

One of the scariest realities of Meltdown and Specter vulnerabilities is that they are very extensive. Almost every modern computer is affected in some way. The real question is, have you been affected? Each system is in a different fragile state, depending on the software that has or has not been patched.

Since Meltdown and Spectre are both fairly new vulnerabilities and things are developing rapidly, it is not easy to tell you what you need to pay attention to or what has been fixed on the system. There are some tools that can help. They are not *, but they can help you find out what you need to know.

Simple test

One of the Linux kernel developers of * provides an easy way to check the status of the system in terms of Meltdown and Specter vulnerabilities. It is simple and the most concise, but it does not apply to every system. Some distributions do not support it. Even so, it's worth a try.

Grep. / sys/devices/system/cpu/vulnerabilities/*

Kernel Vulnerability Check

You should see output similar to the screenshot above. There is a good chance that you will find at least one loophole in the system. This is true because Linux has not made any progress in mitigating the impact of Specter v1.

Script

If the above method is not suitable for you, or if you want to see a more detailed system report, a developer has created a shell script that will check your system to see what vulnerabilities have affected your system, and what has been done to mitigate the impact of Meltdown and Spectre.

To get the script, make sure Git is installed on your system, and then clone the script repository to a directory where you don't mind running it.

Cd ~ / Downloadsgit clone https://github.com/speed47/spectre-meltdown-checker.git

This is not a large warehouse, so it should only take a few seconds to clone. When you are finished, enter the newly created directory and run the provided script.

Cd spectre-meltdown-checker./spectre-meltdown-checker.sh

You will see a lot of output on the terminal. Don't worry, it's not too hard to understand. First, the script checks your hardware, and then runs three vulnerability checks: Specter v1, Spectre v2, and Meltdown. Each loophole has its own part. In between, the script clearly tells you whether you are affected by these three vulnerabilities.

Meltdown Spectre Check Script Ubuntu

Each section provides you with potentially available mitigation solutions and whether they have been applied. I need a little common sense here. The decisions it gives may seem conflicting. Take a look at it and see if what it calls a fix actually completely alleviates the problem.

The above is all the contents of the article "how to check your Linux system for Meltdown or Spectre vulnerabilities". Thank you for reading! I believe we all have a certain understanding, hope to share the content to help you, if you want to learn more knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.