How to update your kernel for Meltdown and Spectre

Quick to answer questions about finding your way around Linux Mint as a new user.
Forum rules
There are no such things as "stupid" questions. However if you think your question is a bit stupid, then this is the right place for you to post it. Stick to easy to-the-point questions that you feel people can answer fast. For long and complicated questions use the other forums in the support section.
Before you post read how to get help. Topics in this forum are automatically closed 6 months after creation.
Locked
rodneyck

Re: How to update your kernel for Meltdown

Post by rodneyck »

Termy wrote:
Clearly, someone dropped the ball.
I doubt that. Remember, people are in a mad rush to get Meltdown and Spectre patched up as quickly as possible for our safety online.
Even at the risk of breaking your own distro? Doesn't matter if you are patched if you can't use your computer.
michael louwe

Re: How to update your kernel for Meltdown

Post by michael louwe »

@ rodneyck, .......
rodneyck wrote:I am not sure why Linux Mint devs decided it was a good idea to release the 4.13 update without thoroughly testing it on all their versions for major bugs. Clearly, someone dropped the ball.
.
The Meltdown and Spectre kernel updates for LM come from Canonical-Ubuntu, ie not from LM devs. LM devs just passed it on to their users. The kernel updates are mainly for 3.13 = Ubuntu 14.04 LTS, 4.4 = Ubuntu 16.04 LTS and 4.13 = Ubuntu 17.10 non-LTS, which are the main editions still supported by Canonical Inc.
... The kernel updates are mostly for 64bit systems, ie 32bit systems can only be patched for Spectre 1, ie not yet patched for Spectre 2 and Meltdown. 32bit system users will have to wait because they are in the minority. Similarly, users of LM 18.2(= Ubuntu 16.04.2 = kernel 4.8 ) and LM 18.3(= Ubuntu 16.04.3 = kernel 4.10) who could not run the patched kernel 4.13.31 or 4.4.112 will have to wait for a newer 4.13 kernel or kernel 4.15 LTS(= Ubuntu 18.04 LTS = LM 19.0 LTS).

Bear in mind that Ubuntu/LM is a free OS with free support = some users will have to wait for the Meltdown and Spectre patches. Even M$ have not yet released Meltdown kernel updates for non-free 32bit Windows systems.
Last edited by michael louwe on Thu Jan 25, 2018 4:09 am, edited 1 time in total.
User avatar
dave8671
Level 4
Level 4
Posts: 337
Joined: Sat Jul 23, 2016 7:04 pm

Re: How to update your kernel for Meltdown

Post by dave8671 »

I do not know which kernel to even try so I am posting the t520 hardware list.

Code: Select all

$ inxi -Fxz
System:    Host: ThinkPadT520 Kernel: 4.13.0-31-generic x86_64 (64 bit gcc: 5.4.0)
           Desktop: Cinnamon 3.6.7 (Gtk 3.18.9-1ubuntu3.3)
           Distro: Linux Mint 18.3 Sylvia
Machine:   System: LENOVO (portable) product: 4243CP8 v: ThinkPad T520
           Mobo: LENOVO model: 4243CP8
           Bios: LENOVO v: 8AET66WW (1.46 ) date: 09/20/2016
CPU:       Dual core Intel Core i5-2520M (-HT-MCP-) cache: 3072 KB
           flags: (lm nx sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx) bmips: 9968
           clock speeds: max: 3200 MHz 1: 2492 MHz 2: 2492 MHz 3: 2492 MHz
           4: 2492 MHz
Graphics:  Card: Intel 2nd Generation Core Processor Family Integrated Graphics Controller
           bus-ID: 00:02.0
           Display Server: X.Org 1.18.4 drivers: intel (unloaded: fbdev,vesa)
           Resolution: 1600x900@60.00hz
           GLX Renderer: Mesa DRI Intel Sandybridge Mobile
           GLX Version: 3.0 Mesa 17.0.7 Direct Rendering: Yes
Audio:     Card Intel 6 Series/C200 Series Family High Definition Audio Controller
           driver: snd_hda_intel bus-ID: 00:1b.0
           Sound: Advanced Linux Sound Architecture v: k4.13.0-31-generic
Network:   Card-1: Intel 82579LM Gigabit Network Connection
           driver: e1000e v: 3.2.6-k port: 5060 bus-ID: 00:19.0
           IF: enp0s25 state: down mac: <filter>
           Card-2: Intel Centrino Advanced-N 6205 [Taylor Peak]
           driver: iwlwifi bus-ID: 03:00.0
           IF: wlp3s0 state: up mac: <filter>
Drives:    HDD Total Size: 500.1GB (2.7% used)
           ID-1: /dev/sda model: WDC_WD5000BPVX size: 500.1GB
           ID-2: /dev/mmcblk0 model: N/A size: 7.9GB
Partition: ID-1: / size: 455G used: 8.8G (3%) fs: ext4 dev: /dev/sda1
           ID-2: swap-1 size: 4.17GB used: 0.00GB (0%) fs: swap dev: /dev/sda5
RAID:      No RAID devices: /proc/mdstat, md_mod kernel module present
Sensors:   System Temperatures: cpu: 44.0C mobo: N/A
           Fan Speeds (in rpm): cpu: 0
Info:      Processes: 200 Uptime: 10 min Memory: 1002.9/3827.7MB
           Init: systemd runlevel: 5 Gcc sys: 5.4.0
           Client: Shell (bash 4.3.481) inxi: 2.2.35
I was shocked to see the kernel the system was using. booted up normal. I looked at which kernel was active wrong.
User avatar
smurphos
Level 18
Level 18
Posts: 8501
Joined: Fri Sep 05, 2014 12:18 am
Location: Irish Brit in Portugal
Contact:

Re: How to update your kernel for Meltdown

Post by smurphos »

dave8671 wrote:I do not know which kernel to even try so I am posting the t520 hardware list.

$ inxi -Fxz
System: Host: ThinkPadT520 Kernel: 4.13.0-31-generic x86_64 ......

I was shocked to see the kernel the system was using. booted up normal. I looked at which kernel was active wrong.
Hi dave,

I have similar hardware and the 4.13 kernel series works just fine. As long as your machine is behaving itself there is no reason to not be on 4.13. If things aren't working then give 4.4 a try (that series also works fine with my hardware).

Code: Select all

System:    Host: steve-HP-Pavilion-g6-Notebook-PC Kernel: 4.13.0-31-generic x86_64 (64 bit gcc: 5.4.0)
           Desktop: Cinnamon 3.6.7 (Gtk 3.18.9-1ubuntu3.3) Distro: Linux Mint 18.3 Sylvia
Machine:   System: Hewlett-Packard (portable) product: HP Pavilion g6 Notebook PC v: 0690120000204710000620100
           Mobo: Hewlett-Packard model: 166F v: 09.4C Bios: Insyde v: F.66 date: 01/24/2013
CPU:       Dual core Intel Core i5-2430M (-HT-MCP-) cache: 3072 KB
           flags: (lm nx sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx) bmips: 9578
           clock speeds: max: 3000 MHz 1: 2394 MHz 2: 2394 MHz 3: 2394 MHz 4: 2394 MHz
Graphics:  Card: Intel 2nd Generation Core Processor Family Integrated Graphics Controller
           bus-ID: 00:02.0
           Display Server: X.Org 1.18.4 drivers: (unloaded: fbdev,vesa)
           Resolution: 1366x768@60.03hz
           GLX Renderer: Mesa DRI Intel Sandybridge Mobile
           GLX Version: 3.0 Mesa 17.2.4 Direct Rendering: Yes
For custom Nemo actions, useful scripts for the Cinnamon desktop, and Cinnamox themes visit my Github pages.
User avatar
dave8671
Level 4
Level 4
Posts: 337
Joined: Sat Jul 23, 2016 7:04 pm

Re: How to update your kernel for Meltdown

Post by dave8671 »

Not issues currently but I will keep the 4.4 as a back up just in case. Never had to change kernels before how do I change to another one? I ask because my T520 did it on it own which I find troubling.
User avatar
Moem
Level 22
Level 22
Posts: 16226
Joined: Tue Nov 17, 2015 9:14 am
Location: The Netherlands
Contact:

Re: How to update your kernel for Meltdown

Post by Moem »

dave8671 wrote:Never had to change kernels before how do I change to another one?
The system will by default boot from the latest kernel. If you want an older kernel instead, remove the newer one. Use the Update Manager to do that, by choosing 'Linux Kernel' on the 'View' menu.
Image

If your issue is solved, kindly indicate that by editing the first post in the topic, and adding [SOLVED] to the title. Thanks!
User avatar
dave8671
Level 4
Level 4
Posts: 337
Joined: Sat Jul 23, 2016 7:04 pm

Re: How to update your kernel for Meltdown

Post by dave8671 »

I did not reboot the system yet. this one is a home built desktop first gen sandy i3 not issues with 4.13.
User avatar
Moem
Level 22
Level 22
Posts: 16226
Joined: Tue Nov 17, 2015 9:14 am
Location: The Netherlands
Contact:

Re: How to update your kernel for Meltdown

Post by Moem »

dave8671 wrote:I did not reboot the system yet.
Then you're still on the old kernel. You can't load a different kernel without rebooting AFAIK.
Image

If your issue is solved, kindly indicate that by editing the first post in the topic, and adding [SOLVED] to the title. Thanks!
User avatar
Pjotr
Level 23
Level 23
Posts: 19886
Joined: Mon Mar 07, 2011 10:18 am
Location: The Netherlands (Holland) 🇳🇱
Contact:

Re: How to update your kernel for Meltdown

Post by Pjotr »

Moem wrote:
dave8671 wrote:I did not reboot the system yet.
Then you're still on the old kernel. You can't load a different kernel without rebooting AFAIK.
Correct. :)
Tip: 10 things to do after installing Linux Mint 21.3 Virginia
Keep your Linux Mint healthy: Avoid these 10 fatal mistakes
Twitter: twitter.com/easylinuxtips
All in all, horse sense simply makes sense.
User avatar
dave8671
Level 4
Level 4
Posts: 337
Joined: Sat Jul 23, 2016 7:04 pm

Re: How to update your kernel for Meltdown

Post by dave8671 »

I just saw this kernel 4.13.0-32.35~16.04.1) xenial what does this address? If there is a website for info on these please post it.
User avatar
karlchen
Level 23
Level 23
Posts: 18177
Joined: Sat Dec 31, 2011 7:21 am
Location: Germany

Re: How to update your kernel for Meltdown

Post by karlchen »

dave8671 wrote:I just saw this kernel 4.13.0-32.35~16.04.1) xenial what does this address? If there is a website for info on these please post it.
The webpage is this one: USN-3548-2: Linux kernel (HWE) vulnerability.
The pretty technical details which bug has been fixed can be retrieved when following the Launchpad bug link at the end of the page.
coding error in retpoline for system call entry in Ubuntu 4.13.0-31 kernels
Image
The people of Alderaan have been bravely fighting back the clone warriors sent out by the unscrupulous Sith Lord Palpatine for 762 days now.
Lifeline
davester

Re: How to update your kernel for Meltdown

Post by davester »

Cosmo. wrote:i know another "nice gui for the kernels", it is called Update Manager -> Linux Kernels. It is already installed on every Mint system.
they are different, the update manager dont show the newest kernels...
User avatar
Moem
Level 22
Level 22
Posts: 16226
Joined: Tue Nov 17, 2015 9:14 am
Location: The Netherlands
Contact:

Re: How to update your kernel for Meltdown

Post by Moem »

davester wrote:the update manager dont show the newest kernels...
It doesn't show the newest kernels. But it does show only kernels that are guaranteed to work with Mint. I'd rather have a compatible kernel than have the newest one. 8)
Please don't point newcomers to things that might break their system, such as going outside of the repos for a newer kernel. That's not a thing we want to encourage.
Image

If your issue is solved, kindly indicate that by editing the first post in the topic, and adding [SOLVED] to the title. Thanks!
Cosmo.
Level 24
Level 24
Posts: 22968
Joined: Sat Dec 06, 2014 7:34 am

Re: How to update your kernel for Meltdown

Post by Cosmo. »

The update manager does indeed show the newest in the official repositories available kernels, in other words those provided by Ubuntu. It does not show kernel, which a newbie should definitely not install.

As this is about Meltdown: Do you now any kernel. which has a patch against this threat, which the supported kernel do not have? If not, your (davester) objection is pointless.
blueredgreen
Level 3
Level 3
Posts: 116
Joined: Sun Jun 17, 2012 12:14 am

Re: How to update your kernel for Meltdown

Post by blueredgreen »

prior kernels not showing on grub menu
i have updated kernel twice - 4.4.0-109 and then 4.4.0-112 but on boot i don't get a grub menu to give me kernel choice in case something goes wrong
only os on machine is mint 18 mate 64 bit with full disc encryption
when i boot machine (acer travelmate) my bios is set to ask for password so i get that first then the disc encrypt password then the os password - i never see the grub

so if i update kernel and it does not work i should be able to remove it with the update manager, but if i was not able to get to update manager i would have a problem



if i run command from this link https://www.techrepublic.com/article/ho ... d-spectre/ it looks like i am still unpatched :(

netbook@blueblue ~ $ grep CONFIG_PAGE_TABLE_ISOLATION=y /boot/config-`uname -r` && echo "patched :)" || echo "unpatched :("
unpatched :(
netbook@blueblue ~ $

my older cpu has not had the microcode update yet so i am not sure if that matters
Image
User avatar
Spearmint2
Level 16
Level 16
Posts: 6900
Joined: Sat May 04, 2013 1:41 pm
Location: Maryland, USA

Re: How to update your kernel for Meltdown

Post by Spearmint2 »

keep hitting Shift or ESC during boot and should show the Menu. Older kernels would be in a section "Previous" or similar description.
All things go better with Mint. Mint julep, mint jelly, mint gum, candy mints, pillow mints, peppermint, chocolate mints, spearmint,....
blueredgreen
Level 3
Level 3
Posts: 116
Joined: Sun Jun 17, 2012 12:14 am

Re: How to update your kernel for Meltdown

Post by blueredgreen »

Spearmint2 wrote:keep hitting Shift or ESC during boot and should show the Menu. Older kernels would be in a section "Previous" or similar description.
hitting ESC worked thank you

still not sure if i am unpatched as per the above grep command
Image
User avatar
Spearmint2
Level 16
Level 16
Posts: 6900
Joined: Sat May 04, 2013 1:41 pm
Location: Maryland, USA

Re: How to update your kernel for Meltdown and Spectre

Post by Spearmint2 »

I wouldn't put too much faith in that method. I installed the "fixed" kernel on my AMD computer and nothing shows it as patched, even though it's the 3.13.0-139-generic #188-Ubuntu SMP Tue Jan 9 14:44:37 UTC 2018 i686 athlon i686 GNU/Linux as stated on this page.

https://usn.ubuntu.com/usn/usn-3524-1/

right now Meltdown and Spectre are "vulnerabilities" with no known actual threat.
All things go better with Mint. Mint julep, mint jelly, mint gum, candy mints, pillow mints, peppermint, chocolate mints, spearmint,....
User avatar
Pjotr
Level 23
Level 23
Posts: 19886
Joined: Mon Mar 07, 2011 10:18 am
Location: The Netherlands (Holland) 🇳🇱
Contact:

Re: How to update your kernel for Meltdown and Spectre

Post by Pjotr »

Spearmint2 wrote:I wouldn't put too much faith in that method. I installed the "fixed" kernel on my AMD computer and nothing shows it as patched, even though it's the 3.13.0-139-generic #188-Ubuntu SMP Tue Jan 9 14:44:37 UTC 2018 i686 athlon i686 GNU/Linux as stated on this page.

https://usn.ubuntu.com/usn/usn-3524-1/
Try this:

Code: Select all

dmesg | grep isolation
right now Meltdown and Spectre are "vulnerabilities" with no known actual threat.
Yet....
Tip: 10 things to do after installing Linux Mint 21.3 Virginia
Keep your Linux Mint healthy: Avoid these 10 fatal mistakes
Twitter: twitter.com/easylinuxtips
All in all, horse sense simply makes sense.
User avatar
Termy
Level 12
Level 12
Posts: 4254
Joined: Mon Sep 04, 2017 8:49 pm
Location: UK
Contact:

Re: How to update your kernel for Meltdown and Spectre

Post by Termy »

So we're told, but I would take that with a grain of salt.
I'm also Terminalforlife on GitHub.
Locked

Return to “Beginner Questions”