Dear All,
I am continuing the discussion of the kernel 4.14.15 compilation in the
Question on CVE-2017-5754 on Debian 8.9 post in a new post.
The reason I am running with this kernel and not the 4.15.0 rc9 kernel that is now available on
kernel.org is that:
1. It is stable
2. I have never tried to compile a kernel in Debian before and want to make it a bit easier for me the first time would try.
3. kernel 4.14.15 does have the KPTI and retpoline patches in it, so it is a fair candidate for the GCC8 compiler to produce a kernel that the patch checker could confirm has these meltdown and spectre fixes are properly set up and active.
Cheers
Regards
MF