Journald warning kernel 6.6.x-x missing microcode

[cscs]

Guess I’m waiting on my microcode…

$ cat /sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow

Vulnerable: Safe RET, no microcode

Or who knows maybe I’ll use spec_rstack_overflow=off to cut the performance hit, as …

In order to exploit vulnerability, an attacker needs to:

    gain local access on the machine

    break kASLR

    find gadgets in the running kernel in order to use them in the exploit

    potentially create and pin an additional workload on the sibling thread, depending on the microarchitecture (not necessary on fam 0x19)

    run the exploit