[gentoo-user] Re: Kernel 4.9.95

[Nikos Chantziaras]

On 27/04/18 20:20, Klaus Ethgen wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> Hi,
>
> Am Fr den 27. Apr 2018 um  6:42 schrieb Nikos Chantziaras:
>> On 26/04/18 14:42, Mick wrote:
>>> Hmm ... why is my Intel system missing 'IBPB' & 'IBRS_FW' ?
>>>
>>> $ grep . /sys/devices/system/cpu/vulnerabilities/*
>>> /sys/devices/system/cpu/vulnerabilities/meltdown:Mitigation: PTI
>>> /sys/devices/system/cpu/vulnerabilities/spectre_v1:Mitigation: __user pointer
>>> sanitization
>>> /sys/devices/system/cpu/vulnerabilities/spectre_v2:Mitigation: Full generic
>>> retpoline
>
> I did install and compile 4.15.18,  the last version from branch 4.15.
> Unfortunatelly I just get the following:
>     ~> uname -a
>     Linux tha 4.15.18-gentoo #2 Fri Apr 27 13:33:03 CET 2018 i686 Intel(R) Pentium(R) M processor 1.86GHz GenuineIntel GNU/Linux
>     ~> grep . /sys/devices/system/cpu/vulnerabilities/*
>     /sys/devices/system/cpu/vulnerabilities/meltdown:Vulnerable
>     /sys/devices/system/cpu/vulnerabilities/spectre_v1:Mitigation: __user pointer sanitization
>     /sys/devices/system/cpu/vulnerabilities/spectre_v2:Vulnerable: Minimal generic ASM retpoline

4.15 is not a supported kernel. Either you need to stay on the bleeding 
edge, meaning 4.16, or use a supported kernel, like 4.14. See:

   https://www.kernel.org

Basically, you need to always use the "mainline" kernel, or a "longterm" 
kernel. Other kernels do not NOT get any updates whatsoever. They are 
considered dead. 4.15 is a dead kernel.