Исходное сообщение
"Релиз Ubuntu 20.04.1 LTS " Отправлено Annms_tmp, 07-Авг-20 08:45
>"But what is surprising is the "the introduction of binary blobs as arrays of numbers in source code for gen7 i915 gpus." That is actually the Intel Haswell / Ivybridge iGPU Leak mitigation that was worked around for addressing CVE-2019-14615, a.k.a. the Intel iGPU information leakage vulnerability from a few months ago that was corrected promptly for modern Intel Gen graphics but the Gen7/Gen7.5 mitigation took much longer due to working around huge performance penalties initially that occurred. Those performance issues were resolved and the Intel Ivybridge/Haswell iGPU Leak mitigation was merged in Linux 5.7 to prevent those users on these older generation graphics from potentially being compromised. But GNU Linux-libre 5.7 is unprotected now over the handling of it. The "the introduction of binary blobs as arrays of numbers" are compiled kernels for clearing EU/L3 residual contexts in addressing this vulnerability. As noted in the source code, these kernels were compiled using Intel's open-source IGT and are precompiled for Haswell and Ivy Bridge for quickly and easily emitting from their kernel driver." https://www.phoronix.com/scan.php?page=news_item&px=GNU-Linu...

Ваше сообщение
Имя*:
EMail:	Для отправки ответов на email укажите знак ! перед адресом, например, !user@host.ru (!! - не показывать email). Более тонкая настройка отправки ответов производится в профиле зарегистрированного участника форума.
Заголовок*:
Сообщение*:	>>"But what is surprising is the "the introduction of binary blobs as arrays of numbers in source code for gen7 i915 gpus." That is actually the Intel Haswell / Ivybridge iGPU Leak mitigation that was worked around for addressing CVE-2019-14615, a.k.a. the Intel iGPU information leakage vulnerability from a few months ago that was corrected promptly for modern Intel Gen graphics but the Gen7/Gen7.5 mitigation took much longer due to working around huge performance penalties initially that occurred. > Those performance issues were resolved and the Intel Ivybridge/Haswell iGPU Leak mitigation > was merged in Linux 5.7 to prevent those users on these > older generation graphics from potentially being compromised. But GNU Linux-libre 5.7 > is unprotected now over the handling of it. > The "the introduction of binary blobs as arrays of numbers" are compiled > kernels for clearing EU/L3 residual contexts in addressing this vulnerability. As > noted in the source code, these kernels were compiled using Intel's > open-source IGT and are precompiled for Haswell and Ivy Bridge for > quickly and easily emitting from their kernel driver." > https://www.phoronix.com/scan.php?page=news_item&px=GNU-Linux-Libre-5.7-Released
	Введите код, изображенный на картинке: