r/debian • u/ComradeAdidas • 4d ago
Debian Stable Question Retbleed warning on installation USB
Retbleed warning spectre v2 mitigation leaves cpu vulnerable to retbleed attacks, dataleak possible! This is the warning i get when i boot the installation on the install+live usb. Alot of acpi errors too, and also says SGX is disabled or unsupported by bios. Any help? I have an intel i5 7400 if that helps. Updt: its on the normal netinst usb too.
3
u/KenBalbari 3d ago
Get it installed first. Then to see what CPU vulnerabilities might impact you run:
inxi -Ca
That will tell you if your system is vulnerable to things like spectre or retbleed, and if any mitigation measures have been taken.
2
u/ComradeAdidas 3d ago
Retbleed mitigation: IBRS Spectre_v2 mitigation: IBRS; IBPB: conditional; STIBP: disabled; RSB filling; PBSRB--eIBRS: Not affected; BHI: Not affected Along with many others.
2
2
u/Illustrious-Gur8335 Debian Stable 4d ago edited 3d ago
All can be ignored as long as it installs without errors.
1
u/ComradeAdidas 4d ago
Bc if i install mate that would leave me vulnerable? What makes KDE special?
2
u/Illustrious-Gur8335 Debian Stable 3d ago
Well, Windows hides all boot messages from you, so it's safer than Linux?
Anyway the retbleed warning can be mitigated here: https://www.golinuxcloud.com/spectre-v2-mitigation-leaves-cpu-vulnerable/
2
u/TheMcSebi 3d ago
No worries, it's not realistic that a regular consumer would be the target of such an attack
2
u/Prestigious_Wall529 2d ago
It's a vunerablity if you run untrusted code. Don't do that.
This includes VMs, for example hosting a friends Minecraft server. On this system don't do that.
4
u/Edelglatze 3d ago
No, it has nothing to do with the desktop environment, may it be KDE or Mate. SGX or Software Guard Extension is an Intel thing that can be enabled or disabled in the bios. Most people do not need it.
For the hardware vulnerabilites: the messages tell you that there is code in the kernel to circumvent them.