Hi,
I have updated my CentOS 6 with "yum update" and restarted, but spectre-meltdown-checker is showing vulnerability to Variant 2:
https://puu.sh/zDIam/2b3c438169.png
How can I fix it?
Spectre Variant 2 on CentoS 6.8
Re: Spectre Variant 2 on CentoS 6.8
Your kernel is compiled with IBRS but your CPU microcode is lacking support to successfully mitigate the vulnerability.
Ask Intel for a microcode update or your hardware vendor for a BIOS update that includes this microcode update.
Up to now, Intel has only come up with a microcode update for Skylake CPUs and you can only get it if your hardware vendor offers a BIOS update including it.
It is not included here: https://downloadcenter.intel.com/download/27337/Linux-Processor-Microcode-Data-File
Ask Intel for a microcode update or your hardware vendor for a BIOS update that includes this microcode update.
Up to now, Intel has only come up with a microcode update for Skylake CPUs and you can only get it if your hardware vendor offers a BIOS update including it.
It is not included here: https://downloadcenter.intel.com/download/27337/Linux-Processor-Microcode-Data-File
Re: Spectre Variant 2 on CentoS 6.8
Moved to CentOS 6 Security forum.