[elrepo] kernel-ml microcode outdated (re: spectre and meltdown)

[Alan Bartlett]

On 7 January 2018 at 23:18, Sam McLeod <mailinglists at smcleod.net> wrote:
> kernel-ml 3.14.11-1 and now 3.14.12-1 is still running the old CPU microcode
> 0x22 version from 2017-01-27 which is insecure and was recently updated to
> help prevent the spectre security vulnerability in Intel / x86 architecture.
>
> I forced initramfs to be regenerated but it made no difference.
>
> # uname -a
> Linux nas 4.14.12-1.el7.elrepo.x86_64 #1 SMP Fri Jan 5 13:28:56 EST 2018
> x86_64 x86_64 x86_64 GNU/Linux
>
>
> ~ [0] # dmesg|grep -i micro
> [    0.000000] microcode: microcode updated early to revision 0x22, date =
> 2017-01-27
> [    0.489107] microcode: sig=0x306c3, pf=0x2, revision=0x22
> [    0.489551] microcode: Microcode Update Driver: v2.2.
>
>
> ~ [0] # rpm -qa | egrep -i 'microcode|firmware|kernel-ml'| egrep -vi
> 'devel|crystalhd|alsa|aic94|3.10.0|ivtv'
> kernel-ml-4.14.11-1.el7.elrepo.x86_64
> kernel-ml-tools-libs-4.14.12-1.el7.elrepo.x86_64
> kernel-ml-headers-4.14.12-1.el7.elrepo.x86_64
> linux-firmware-20170606-57.gitc990aae.el7.noarch
> kernel-ml-tools-4.14.12-1.el7.elrepo.x86_64
> kernel-ml-4.14.12-1.el7.elrepo.x86_64
> microcode_ctl-2.1-22.2.el7.x86_64
>
>
> --
> Sam McLeod

My hint is that you execute the following command and see from whence
you have obtained the microcode_ctl package --

rpm -q --qf "%{V}-%{R}-%{ARCH}\t%{VENDOR}\n" microcode_ctl

Alan.