Keynote: MDS, Fallout, Zombieland, and Linux

on YouTube ↗19m

" summary

MDS covers a family of Intel CPU speculative-execution bugs (Ridl, Fallout, Zombieland) that leak data across processes and VMs and require both update BIOS and kernel and a power cycle to be safe. Kernel fixes force flush the buffers on context switches; disabling hyper-threading removes most issues but costs real performance — about 15% in one build workflow and ~2% for others. Google audits found 218 issues and 92% were already fixed in LTS kernels, so keep kernels updated (monthly or quarterly).

AI-written summary · about

" chapters (7)

1. 0:00Start
2. 4:16OpenBSD was right
3. 6:17Fallout
4. 7:17Zombieland
5. 9:06Flushing CPU buffers is slow
6. 12:03Linux's response
7. 17:02Linux Longterm kernels Fix Problems

" related talks

• 20mKeynote: MDS, Fallout, Zombieland & LinuxGreg Kroah-Hartman · Open Source Summit Europe + Embedded Linux Conference Europe 2019
• 30mSpectre, Meltdown, & LinuxGreg Kroah-Hartman · LinuxCon + ContainerCon + CloudOpen China 2018
• 06mQ&AGreg Kroah-Hartman · Open Source Summit North America 2018
• 26mKeynote: The Kernel ReportJonathan Corbet · Embedded Linux Conference + OpenIoT Summit North America 2018
• 42mProtecting the Linux Kernel from Confidential Computing Threats in Virtual EnvironmentsElena Reshetova, Carlos Bilbao · Linux Security Summit North America 2024
• 24mKeynote: Status of Embedded LinuxTim Bird · Embedded Linux Conference + OpenIoT Summit Europe 2016
• 34mGetting on the Same (Virtual Memory) Page: A Roundtable on Data-only Attack MitigationsMaxwell Bland · Linux Security Summit North America 2025
• 44mDeep Analysis of Exploitable Linux Kernel Vulnerabilities 2017-2019Tong Lin, Luhai Chen · Linux Security Summit Europe 2019