Spectre, Meltdown, & Linux

on YouTube ↗30m

" summary

January 2018 exposes speculative‑execution CPU bugs (Spectre/Meltdown) that let user code read kernel or other VM memory; research lists at least five variants with "at least eight or nine" expected. Fixes combine core kernel patches, ~200 KAISER/KPTI changes for kernel isolation, compiler work (retpoline) to protect indirect calls, and microcode/BIOS updates from vendors. Static tools flag ~100 candidate sites in the 20M LOC Linux tree but only ~5 proved real. Mitigations cost ~5–10% typical CPU throughputs and vary by kernel version (4.14+, 4.16+ recommended).

AI-written summary · about

" chapters (12)

1. 0:00Introduction
2. 1:10What is Meltdown
3. 6:32Makena
4. 11:51CPU is slower
5. 13:08When do we fix it
6. 14:27We fixed it again
7. 15:21Variants
8. 17:23Spectre Meltdown
9. 22:21Floating Points
10. 23:58CPU Bugs
11. 25:28Kernels
12. 27:56Keeping a secure system

" related talks

• 50mPractical Ghostbusting: Meltdown, Spectre and YouIan Coldwater · NDC Minnesota 2018
• 20mKeynote: MDS, Fallout, Zombieland & LinuxGreg Kroah-Hartman · Open Source Summit Europe + Embedded Linux Conference Europe 2019
• 25mThe Memory of a MeltdownShane Cota, Chris Magistrado · BSidesSF 2018
• 24mThe Memory of a MeltdownShane Cota, Chris Magistrado · BSidesSF 2018
• 19mKeynote: MDS, Fallout, Zombieland, and LinuxGreg Kroah-Hartman · KubeCon + CloudNativeCon + Open Source Summit China 2019
• 19mKeynote: MDS, Fallout, Zombieland & LinuxGreg Kroah-Hartman · Open Source Summit + Embedded Linux Conference North America 2019
• 48mSpeculative execution vulnerabilitiesRaoul Strackx · hardwear.io USA 2019
• 43m“Closing Panel: Spectre”Chandler Carruth, Matt Miller · CppCon 2018