* CPU indicates ARCH_CAPABILITIES MSR availability: NO * CPU indicates SSBD capability: YES (Intel SSBD) * Speculative Store Bypass Disable (SSBD) * CPU indicates STIBP capability: YES (Intel STIBP feature bit) * Single Thread Indirect Branch Predictors (STIBP) * CPU indicates IBPB capability: YES (SPEC_CTRL feature bit) * Indirect Branch Prediction Barrier (IBPB) * CPU indicates IBRS capability: YES (SPEC_CTRL feature bit) * Indirect Branch Restricted Speculation (IBRS) * Hardware support (CPU microcode) for mitigation techniques Spectre and Meltdown mitigation detection tool v0.39Ĭhecking for vulnerabilities on current system ( Previously posted in VirtualBox forum.)ĭebian spectre-meltdown-checker -paranoid echo $? Is this a VirtualBox issue or false-positive in spectre-meltdown-checker? Were all necessary steps performed to protect the guest from spectre/meltdown? Spectre-meltdown-checker reporting vulnerable. Spectre-meltdown-checker in guest VM saying 'all fine'. (These options were introduced in VirtualBox version 5.2.18.) VBoxManage modifyvm vm-name -l1d-flush-on-sched off VBoxManage modifyvm vm-name -spec-ctrl on

VBoxManage modifyvm vm-name -ibpb-on-vm-exit on VBoxManage modifyvm vm-name -ibpb-on-vm-entry on Suppose using all VirtualBox spectre/meltdown defense options. Sudo spectre-meltdown-checker -paranoid echo $?īy fine I mean exit code 0 and not showing 'vulnerable'. Suppose running spectre-meltdown-checker on the host looks fine. Sudo apt-get -t stretch-backports install amd64-microcode Sudo apt-get -t stretch-backports install intel-microcode

Sudo apt-get -t stretch-backports install spectre-meltdown-checker Sudo su -c 'echo -e 'deb stretch-backports main contrib non-free' > /etc/apt//backports.list' (Old versions are incapable to show spectre/meltdown fixed.) Spectre-meltdown-checker being installed on host and in guest from stretch-backports. Host using stretch-backports with get access to newer microcode.

Free for apple instal Spectre