Address Space Isolation In this blog post, Oracle Linux kernel developers Alexandre Chartre and Konrad Rzeszutek Wilk give an update on the Spectre v1 and L1TF...
Address Space Isolation In this blog post, Oracle Linux kernel developers Alexandre Chartre and Konrad Rzeszutek Wilk give an update on the Spectre v1 and L1TF software solutions. Introduction In August of 2018 the L1TF speculative execution side channel vulnerabilities were presented (see Foreshadow – Next Generation (NG). However the story is more complicated. In particular, an explanation in L1TF - L1 Terminal Fault mentions that if hyper-threading is enabled, and the host...
Address Space Isolation In this blog post, Oracle Linux kernel developers Alexandre Chartre and Konrad Rzeszutek Wilk give an update on the Spectre v1 and L1TF software solutions. Introduction In...
The Power of XDP Oracle Linux kernel developer Alan Maguire talks about XDP, the eXpress DataPath which uses BPF to accelerate packet processing. For more...
The Power of XDP Oracle Linux kernel developer Alan Maguire talks about XDP, the eXpress DataPath which uses BPF to accelerate packet processing. For more background on BPF, see the series on BPF, wherein he presented an in depth look at the kernel's "Berkeley Packet Filter" -- a useful and extensible kernel function for much more than packet filtering. [Important note: the BPF blog series referred to BPF functionality available in the 4.14 kernel. The functionality described...
The Power of XDP Oracle Linux kernel developer Alan Maguire talks about XDP, the eXpress DataPath which uses BPF to accelerate packet processing. For more background on BPF, see the series on...
The Unbreakable Enterprise Kernel (UEK) for Oracle Linux provides the latest open source innovations and key optimizations and security to enterprise cloud...
The Unbreakable Enterprise Kernel (UEK) for Oracle Linux provides the latest open source innovations and key optimizations and security to enterprise cloud workloads. It is the Linux kernel that powers Oracle Cloud and Oracle Engineered Systems such as Oracle Exadata Database Machine as well as Oracle Linux on any Intel-64, AMD-64 or ARM hardware. What's New? UEK R5 Update 2 is based on the mainline kernel version 4.14.35. Through actively monitoring upstream check-ins and...
The Unbreakable Enterprise Kernel (UEK) for Oracle Linux provides the latest open source innovations and key optimizations and security to enterprise cloud workloads. It is the Linux kernel...
Oracle Linux kernel developer Boris Ostrovsky wrote this explanation of AMD's memory encryption technologies. AMD SME and SEV Introduction Disk encryption by...
Oracle Linux kernel developer Boris Ostrovsky wrote this explanation of AMD's memory encryption technologies. AMD SME and SEV Introduction Disk encryption by now has become a standard procedure to protect information from an intruder who has physical access to the system but is not able, for example, to log in. However, the other system component used for storing data, system memory, remains largely vulnerable. It is true that extracting data from memory is typically more...
Oracle Linux kernel developer Boris Ostrovsky wrote this explanation of AMD's memory encryption technologies. AMD SME and SEV Introduction Disk encryption by now has become a standard procedure to...
In this blog post, Oracle Linux kernel developer Konrad Rzeszutek Wilk gives an update on the state of speculative execution vulnerabilities and mitigations in...
In this blog post, Oracle Linux kernel developer Konrad Rzeszutek Wilk gives an update on the state of speculative execution vulnerabilities and mitigations in 2019. In early 2018, researchers announced a novel mechanism to extract sensitive data from CPU cores using the processor's own speculative execution engine. These exploits are termed Speculative Execution Side Channel Vulnerabilities and were described in the meltdown.pdf and spectre.pdf papers. An additional side...
In this blog post, Oracle Linux kernel developer Konrad Rzeszutek Wilk gives an update on the state of speculative execution vulnerabilities and mitigations in 2019. In early 2018,...
Thanks to Chuck Anderson, Linux kernel developer, Oracle, for compiling the information in this post. Enhancements to mainline Linux continue at a steady pace,...
Thanks to Chuck Anderson, Linux kernel developer, Oracle, for compiling the information in this post. Enhancements to mainline Linux continue at a steady pace, though we don’t always hear a lot about this work. With the 5.1 release upon us, we wanted to give a shout out to some important and notable additions that the 5.0 release brought to bear. Some we chose because our kernel developers are directly involved, some because they affect Oracle workloads, and others simply...
Thanks to Chuck Anderson, Linux kernel developer, Oracle, for compiling the information in this post. Enhancements to mainline Linux continue at a steady pace, though we don’t always hear a lot about...
Did you know that in 2017, U.S. federal agencies reported 35,277 cybersecurity incidents for their IT systems? And that in 2018, malicious cyber activity cost...
Did you know that in 2017, U.S. federal agencies reported 35,277 cybersecurity incidents for their IT systems? And that in 2018, malicious cyber activity cost the U.S. economy between $57-109 billion dollars? This new GovLoop market trends report discusses the challenges facing government agencies. Like private enterprises, federal agencies need layers of protection in their data centers and clouds. Several things have been happening in the Oracle Linux group to help our...
Did you know that in 2017, U.S. federal agencies reported 35,277 cybersecurity incidents for their IT systems? And that in 2018, malicious cyber activity cost the U.S. economy between $57-109 billion...
In this blog, the third in a series of three, Oracle Linux developer Jag Raman analyzes the performance of the disaggregated QEMU. Performance of Separated LSI...
In this blog, the third in a series of three, Oracle Linux developer Jag Raman analyzes the performance of the disaggregated QEMU. Performance of Separated LSI device It is essential to check how the Separated LSI device performs in comparison with the LSI device built into QEMU. For this purpose, we ran CloudHarmony block-storage benchmark on both. We ran this benchmark on a BareMetal instance in Oracle Cloud. The results are summarized below. CloudHarmony results For...
In this blog, the third in a series of three, Oracle Linux developer Jag Raman analyzes the performance of the disaggregated QEMU. Performance of Separated LSI device It is essential to check how the...
In this blog, the second in a series of three, Oracle Linux kernel developer Elena Ufimtseva demonstrates how to configure and build our disaggregated QEMU....
In this blog, the second in a series of three, Oracle Linux kernel developer Elena Ufimtseva demonstrates how to configure and build our disaggregated QEMU. Configure and build multi-process QEMU To build the system that supports multi-process device emulation in QEMU, the build system was modified to add new objects. To get the latest development tree with multi-process support clone it from the git repository and branch multi-process-qemu-v0.1: git clone...
In this blog, the second in a series of three, Oracle Linux kernel developer Elena Ufimtseva demonstrates how to configure and build our disaggregated QEMU. Configure and build multi-process QEMU...
