Kushatisa kwakanyanya kwekuita mukernel 5.19 kunokonzerwa neRetbleed kurwisa kudzivirira

Injiniya kubva kuVMware yakaunza kune iyo Linux kernel budiriro nharaunda kudzikira kwakanyanya mukuita kana uchishandisa Linux kernel 5.19. Kuedzwa kwemuchina chaiwo une kernel 5.19 yakakomberedzwa neVMware ESXi hypervisor yakaratidza kudzikira kwekuita komputa ne70%, network mashandiro ne30%, uye kuchengetedza mabasa ne13%, zvichienzaniswa neiyo configuration yakavakirwa pakernel 5.18.

Chikonzero chekudzikira kwekuita shanduko yekodhi yekudzivirira pakurwisa kweSpecter v2 kirasi (spectre_v2 = ibrs), inoshandiswa pahwaro hweyakawedzerwa IBRS (Enhanced Indirect Branch Restricted Speculation) mirairo, iyo inobvumira adaptively kubvumira uye kudzima kufungidzira. kuitwa kwemirairo panguva yekuvhiringidza kugadzirisa uye system mafoni uye mamiriro ekuchinja. Dziviriro inosanganisirwa kuvharisa ichangobva kuwanikwa Retbleed kusagadzikana mune yekufungidzira kuuraya isina kunanga CPU shanduko, iyo inokutendera iwe kuti ubvise ruzivo kubva kukernel memory kana kuronga kurwiswa kweiyo host system kubva kumashini chaiwo. Mushure mekudzima dziviriro (spectre_v2=off), kuita kunodzokera kune yayo yapfuura nhanho.

Source: opennet.ru

Voeg