Scientific Linux Security Update : microcode_ctl on SL6.x, SL7.x i386/x86_64 (Spectre)
Medium Nessus Plugin ID 106227
SynopsisThe remote Scientific Linux host is missing one or more security updates.
DescriptionThis update supersedes the previous microcode update provided with the CVE-2017-5715 (Spectre) CPU branch injection vulnerability mitigation.
Further testing has uncovered problems with the microcode provided along with the Spectre mitigation that could lead to system instabilities.
As a result, this microcode update reverts to the last known good microcode version dated before 03 January 2018.
You should contact your hardware provider for the latest microcode updates.
IMPORTANT: If you are using Intel Skylake-, Broadwell-, and Haswell-based platforms, obtain and install updated microcode from your hardware vendor immediately. The 'Spectre' mitigation requires both an updated kernel and updated microcode from your hardware vendor.
SolutionUpdate the affected microcode_ctl and / or microcode_ctl-debuginfo packages.