{"id":119848,"date":"2024-09-17T21:43:00","date_gmt":"2024-09-17T19:43:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/inzhener-iz-amd-predlozhil-uprostit-v-yadre-linux-upravlenie-blokirovkami-uyazvimostej-cpu"},"modified":"2024-09-17T21:43:00","modified_gmt":"2024-09-17T19:43:00","slug":"inzhener-iz-amd-predlozhil-uprostit-v-yadre-linux-upravlenie-blokirovkami-uyazvimostej-cpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/inzhener-iz-amd-predlozhil-uprostit-v-yadre-linux-upravlenie-blokirovkami-uyazvimostej-cpu","title":{"rendered":"AMD insener pakkus v\u00e4lja CPU haavatavuste lukustuse haldamise lihtsustamise Linuxi tuumas","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kuna Linuxi tuuma toetatavate CPU haavatavuste re\u017eiimide arv on j\u00f5udnud 15ni ja k\u00f5igi haavatavuste loetlemine tuuma k\u00e4sureas on muutunud \u00fcsna keeruliseks, soovitas AMD tuuma arendaja liikuda konkreetsete haavatavuste blokeerimise seadistamiselt r\u00fcnnakute vektorite blokeerimise valimisele. <\/p>\n

Blokeerimismeetodeid soovitatakse aktiveerida s\u00f5ltuvalt isoleerimise rikkumise liigist: kasutaja ja tuuma vahel (mitigate_user_kernel), kasutaja ja teise kasutaja vahel (mitigate_user_user), k\u00fclalis s\u00fcsteemi ja host-keskkonna vahel (mitigate_guest_host), erinevate k\u00fclalis s\u00fcsteemide vahel (mitigate_guest_guest) ja erinevate l\u00f5imede vahel (mitigate_cross_thread). <\/p>\n

Pakutud l\u00e4henemine v\u00f5imaldab aktiveerida ainult kaitse nende haavatavuste klasside eest, mis t\u00f5eliselt huvitavad kasutajat. N\u00e4iteks saavad pilvekeskkondade omanikud lubada re\u017eiimid mitigate_guest_host ja mitigate_guest_guest, mille j\u00e4rel aktiveeritakse kaitsemeetodid haavatavuste BHI, GD, L1TF, MDS, MMIO, Retbleed, RFDS, Spectre_v2, SRBDS, SRSO ja TAA. =============== ============== ============ ============= ============== ============ Haavatavus Kasutaja-Kerneli vahel Kasutaja-Kasutaja vahel K\u00fclalise-Host vahel K\u00fclalise-K\u00fclalise vahel L\u00f5imede vahel =============== ============== ============ ============= ============== ============ BHI X X GDS X X X X L1TF X X MDS X X X X X MMIO X X X X X Meltdown X Retbleed X X X RFDS X X X X Spectre_v1 X Spectre_v2 X X Spectre_v2_user X X SRBDS X X X X SRSO X X SSB TAA X X X X X
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u0430\u043a \u043a\u0430\u043a \u0447\u0438\u0441\u043b\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432 \u044f\u0434\u0440\u0435 Linux \u0440\u0435\u0436\u0438\u043c\u043e\u0432 \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 CPU \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e 15 \u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u044f\u0434\u0440\u0430 \u0441\u0442\u0430\u043b\u043e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u044f\u0434\u0440\u0430 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 AMD \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043e\u0442 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a \u0432\u044b\u0431\u043e\u0440\u0443 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0430\u0442\u0430\u043a\u0438. \u041c\u0435\u0442\u043e\u0434\u044b \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0438\u0434\u0430 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438: \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-119848","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AMD insener pakkus v\u00e4lja, kuidas muuta Linuxi tuuma CPU haavatavuste blokeerimise haldamine lihtsamaks | ProHoster","description":"Kuna Linuxi tuuma toetatavate CPU haavatavuste re\u017eiimide arv on j\u00f5udnud 15ni ja k\u00f5igi haavatavuste loetlemine tuuma k\u00e4sureas on muutunud \u00fcsna keeruliseks, t\u00f6\u00f6tas tuuma arendaja ettev\u00f5ttest.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/inzhener-iz-amd-predlozhil-uprostit-v-yadre-linux-upravlenie-blokirovkami-uyazvimostej-cpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0436\u0435\u043d\u0435\u0440 \u0438\u0437 AMD \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u0443\u043f\u0440\u043e\u0441\u0442\u0438\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CPU | ProHoster","og:description":"\u0422\u0430\u043a \u043a\u0430\u043a \u0447\u0438\u0441\u043b\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432 \u044f\u0434\u0440\u0435 Linux \u0440\u0435\u0436\u0438\u043c\u043e\u0432 \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 CPU \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e 15 \u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0435 \u0432\u0441\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u044f\u0434\u0440\u0430 \u0441\u0442\u0430\u043b\u043e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u044f\u0434\u0440\u0430 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/inzhener-iz-amd-predlozhil-uprostit-v-yadre-linux-upravlenie-blokirovkami-uyazvimostej-cpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-09-17T19:43:00+00:00","article:modified_time":"2024-09-17T19:43:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"119848","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 06:36:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 06:36:19","updated":"2026-01-23 06:36:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119848","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=119848"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/119848\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=119848"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=119848"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=119848"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}