Where are the microcode updates for Crosstalk in F32 ?

[Sreyan Chakravarty]

Hi,

Well guys, its time to panic once again.


I just found out my system is vulnerable to the new Crosstalk 
vulnerability by running the popular Meltdown OVH script.

More about the vulnerability over here:

https://www.vusec.net/projects/crosstalk/

These exploits get worse each time, this one affects all cores.


This is how I tested for the vulnerability.

Downloaded spectre-meltdown-checker.sh via :

wget https://meltdown.ovh -O spectre-meltdown-checker.sh

and then just executed with sudo.

This is the output I got:

* SRBDS mitigation control is enabled and active:  NO
>  STATUS:  VULNERABLE  (Your CPU microcode may need to be updated to
> mitigate the vulnerability) 
CVE-2020-0543:KO

Full output here:
https://pastebin.com/raw/hyfFBbaF


As you can see the tool specifies that my microcode is not the latest.

That being said, where do I find the latest microcode from ?

My OS is fully updated, and the firmware and microcode is also latest
according to DNF:

$ sudo dnf update linux-firmware
Dependencies resolved.
Nothing to do.
Complete!

$ sudo dnf update microcode_ctl
Dependencies resolved.
Nothing to do.
Complete!

So where is the microcode update in Fedora for this ??

Canonical has already published microcode updates for this, as shown here:
https://youtu.be/UR-5vAZ1cGg?t=1160

<rant>
It kind of seems frustrating that a bleeding edge distro like Fedora still hasn't
  provided updates yet. While Ubuntu a distro that doesn't always use the latest
software already has a fix.
</rant>

What can I do now ? What is progress for Fedora ?

Will the microcode from Canonical work for Fedora ? Dumb question I know but I
am desperate.

Let me know if any further info is required.

Some more info about my CPU:
https://pastebin.com/raw/TNJS930F


What is everyone else in the community doing about this ?

Thanks.

-- 
Regards,
Sreyan