From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <development+bounces-1098-archive=lists.ipfire.org@lists.ipfire.org>
Received: from mail02.haj.ipfire.org (localhost [IPv6:::1])
	by mail02.haj.ipfire.org (Postfix) with ESMTP id 4cYndT2Db0z32Xd
	for <archive@lists.ipfire.org>; Sat, 27 Sep 2025 13:01:17 +0000 (UTC)
Received: from mail01.ipfire.org (mail01.haj.ipfire.org [IPv6:2001:678:b28::25])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384
	 client-signature RSA-PSS (4096 bits) client-digest SHA256)
	(Client CN "mail01.haj.ipfire.org", Issuer "R13" (verified OK))
	by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4cYndP6ln2z2xJy
	for <development@lists.ipfire.org>; Sat, 27 Sep 2025 13:01:13 +0000 (UTC)
Received: from [127.0.0.1] (localhost [127.0.0.1])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256)
	(No client certificate requested)
	by mail01.ipfire.org (Postfix) with ESMTPSA id 4cYndN0YbZz3w3
	for <development@lists.ipfire.org>; Sat, 27 Sep 2025 13:01:12 +0000 (UTC)
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org;
	s=202003ed25519; t=1758978072;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding;
	bh=rpfgRcqpyg0FvaB9mE4fNaugfI9C9QIbIjLSfyjJCEo=;
	b=fiqXNddIZpYbUm6+U4xlxRyGrxhoOynit3xxGJH6nZTdVwNuNUFTG5G8dwQsICPU2E8uFW
	VUDwAaowllt4tTCw==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa;
	t=1758978072;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding;
	bh=rpfgRcqpyg0FvaB9mE4fNaugfI9C9QIbIjLSfyjJCEo=;
	b=Ipkw9pOkDcotyNwSV1vygtxrLY4zrWgVC+NExaWaypqLELru39Pg52aT1cA8A2iZEnEN1w
	Wp14gucexXA1UKOu3+6oIcvFrWNYDx7Z0T74XvWP/N+WZ6tM5EkxOJw15ZXlMcw+seVm5Z
	DzaQBBzHDmKGaU9Q0kt+JFPtlDhfCMK8r/74gdTrg5jBLcA3KZ7/OayhPIL14TGBDSDhjs
	IqiQzlWzBZpO/WbxXtSWTdZIL5KMpU4Wh5FRqx0vaaUGlglXwEARKHvIUyLCtI5Uv2zr76
	6RyVQqI4F86XMRbNpZdenAioAnSCq7HxYMTeUOR8Mau+F5k9toGtkBNaW+X1wA==
Message-ID: <450b6b8a-0b44-4908-8e47-2cfed62d49df@ipfire.org>
Date: Sat, 27 Sep 2025 15:01:08 +0200
Precedence: list
List-Id: <development.lists.ipfire.org>
List-Subscribe: <https://lists.ipfire.org/>,
 <mailto:development+subscribe@lists.ipfire.org?subject=subscribe>
List-Unsubscribe: <https://lists.ipfire.org/>,
 <mailto:development+unsubscribe@lists.ipfire.org?subject=unsubscribe>
List-Post: <mailto:development@lists.ipfire.org>
List-Help: <mailto:development+help@lists.ipfire.org?subject=help>
Sender: <development@lists.ipfire.org>
Mail-Followup-To: <development@lists.ipfire.org>
MIME-Version: 1.0
Content-Language: en-GB
To: "IPFire: Development-List" <development@lists.ipfire.org>
From: Adolf Belka <adolf.belka@ipfire.org>
Subject: Special register buffer data sampling (CVE-2020-0543) on new mini
 system
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

Hi All,

Something I noticed. The new mini system is showing "Vulnerable - No microcode" for the "Special register buffer data sampling (CVE-2020-0543)" vulnerability.

However when I go and look at the Intel site for vulnerabilities versus CPU then for the Celeron J series and CVE-2020-0543 it shows Not Affected.

The vulnerability would need the attacker to have local access to the system and be authenticated, which would mean logged in as root so then you would have already lost big time as they could access anything but it just puzzled me why it is shown as Vulnerable. I presume that this comes from info from Intel that is in the kernel.

Regards,

Adolf.