speed47 / spectre-meltdown-checker

Reptar, Downfall, Zenbleed, ZombieLoad, RIDL, Fallout, Foreshadow, Spectre, Meltdown vulnerability/mitigation checker for Linux & BSD
3.84k stars 477 forks source link

Microcode update check: use pfid mask in Intel source #482

Closed speed47 closed 7 months ago

speed47 commented 7 months ago

Right now, we only take into account the CPUID to look for the proper microcode, but this is not sufficient for Intel as several distinct CPUs have the same CPUID but a different microcode version, in which case their PlatformID is different, and the proper microcode version that must be applied to them can be checked against the pf_mask (mask of PlatformIDs supported by this microccode) as reported by iucode_tool:

example: 078/004: sig 0x000106ca, pf_mask 0x10, 2009-08-25, rev 0x0107, size 5120