Linus Torvalds, the original creator of Linux, announced good and bad news about the Meltdown and Specter security vulnerabilities. The good news is that Linux Kernel 4.15 has been released and it's "quiet and small, no last-minute panic, with minor fixes for various themethe".
The bad news? "We're not done with Specter - Meltdown."
In the Linux Kernel mailing list (Linux Kernel Mailing List or LKML), Torvalds reports:
“Most of the 4.15 project it was all the regular boring stuff and I mean it was done in the best possible way that might not be flashy enough to get headlines, but it's the bread and butter of core development."
“While Spectre/Meltdown was obviously the big news of this development cycle, it's worth noting that we also had all the regular updates and that work everywhere else didn't stop, and it didn't distract developers from the CPU issues. In the big picture, 4.15 looks perfectly normal, with the two third of the full patch to be drivers … and not to reduce CPU errors.”
But in trying to fix the problems that arose with the Meltdown and Specter vulnerabilities, the developers "spent" a long time on problems that have not yet been completed. First of all, like all developers of any operating system, those of Linux expect Intel hardware designers to complete firmware and microcode updates.
In his latest quarterly report, Intel CEO Brian Krzanich said Intel would "restore confidence in data security with a first urgent, transparent and timely communication with the customer." We are still waiting.
Krzanich also said that Intel is "working around the clock" to mitigate Meltdown and Specter defects and that the company will release updated chips later this year to provide a permanent solution. In the long run, defining these hardware architectural design problems may even require users to replace their CPUs.
Meanwhile, Torvalds developers for the Linux kernel know the job is not done.
Torvalds said: "It is worth noting that we are not ready with Specter / Meltdown. It takes more time (arm, specter-v1, etc.) ”
Torvalds believes that “we will have a normal and completely boring development cycle for the 4.16 kernel. "Because boring is really good."
- Windows vs Linux you like does not like it
- Kernel 4.14.15 fixes 2 on 3 Variants of Specter & Meltdown