Ukuthotywa kokusebenza okumandundu kwi-kernel 5.19 okubangelwa kukhuseleko lweRetbleed

Injineli evela kwi-VMware yazisa kuluntu lophuhliso lwe-Linux kernel ukuhla okubonakalayo ekusebenzeni xa usebenzisa i-Linux kernel 5.19. Uvavanyo lomatshini we-virtual kunye ne-kernel 5.19 ejikelezwe yi-VMware ESXi hypervisor ibonise ukuhla kwe-computing yokusebenza nge-70%, imisebenzi yenethiwekhi nge-30%, kunye nemisebenzi yokugcinwa kwe-13%, xa kuthelekiswa noqwalaselo olufanayo olusekelwe kwi-kernel 5.18.

Isizathu sokuhla kwentsebenzo lutshintsho kwikhowudi yokukhusela ekuhlaselweni kweklasi yeSpecter v2 (spectre_v2=ibrs), ephunyezwe ngesiseko se-IBRS eyandisiweyo (i-Enhanced Indirect Branch Restricted Speculation) imiyalelo, evumela ukulungelelanisa ukuvumela kunye nokukhubaza uqikelelo. ukuphunyezwa kwemiyalelo ngexesha lokuphazamiseka kokusetyenzwa kunye neefowuni zenkqubo kunye nokutshintsha imeko. Ukhuseleko lubandakanyiwe ukubhloka ukuba sesichengeni seRetbleed esandula kufunyanwa kwindlela yokuqikelela ukuphunyezwa kweenguqu ze-CPU ezingathanga ngqo, ekuvumela ukuba ukhuphe ulwazi kwimemori ye-kernel okanye uququzelele ukuhlaselwa kwenkqubo yomkhosi kumatshini obonakalayo. Emva kokucima ukhuseleko (i-spectre_v2=off), ukusebenza kubuyela kwinqanaba langaphambili.

umthombo: opennet.ru

Yongeza izimvo