CPU's and hardware vulnerabilities

[Monti]

Hi,

I have read this article which talks about bugs in the hardware architecture of Intel Core 2 Duo processors.

I am wondering if anyone have some thoughts or knowledge when it comes to other cpu's? Both Intel and AMD that is.


Thanks

[e1-531g]

For Intel's CPUs search for "Specification Update" pdfs or something like that.

Example: https://www-ssl.intel.com/content/da...pec-update.pdf

As far as I know there are two ways for microcode to be applied. First is with new version of BIOS/UEFI. Second is update by OS, for example in Debian there is microcode in non-free section of official repo:
https://packages.debian.org/jessie/intel-microcode
You should also know that not every bug in hardware can be fixed by microcode update.

[Monti]

Thanks a lot for your info and links e1. This is interesting.

Since the intel-microcode update link is for Debian, and if I understand this correctly, would it be possible to just use a Debian live dvd and do the microcode update for those of us using OpenBSD?

I am also trying to get an overview or a picture of the tendency for these bugs to occur with the different cpu models with both Intel and AMD. So if this is possible more input is appreciated.

Thanks

[IdOp]

I don't know about vulnerabilities specifically, but here's an example with

AMD CPU errata

The errata section is very long, going from page 13 to 99.

I was once alerted to an AMD CPU erratum by a line in an OpenBSD dmesg which said

cpu0: AMD erratum 89 present, BIOS upgrade may be required

Searching for that led to a document similar to the one linked above.

My sense is that CPU errata are very common and always have been.

[e1-531g]

You can also read article from heise online called "Processor Whispers: About Bugs, Bidders and Batmen" by Andreas Stiller
https://web.archive.org/web/20131207...n-1775150.html

[Monti]

Thank you very much IdOp for useful info. And thank you e1 for the additional link. Both giving me the perspectives I was searching for. Really appreciate it.

Monti