Please note that fix currently available for the following distros for sure (kernel version that includes patch is in brackets):

  1. RHEL 6.x [2.6.32-696.18.7]/7.x [3.10.0-693.11.6]
  2. CentOS 6.x [2.6.32-696.18.7]/7.x [3.10.0-693.11.6]
  3. Fedora 26 [4.14.11-200]/27 [4.14.11-300]
  4. Debian stretch [4.9.0-5-amd64]/jessie [3.16.0-5-amd6]/wheezy [3.2.0-5-amd64]
  5. CoreOS [4.14.11-coreos]
  6. Arch Linux [update to current rolling]
  7. Gentoo Linux [update to current rolling]
  8. Ubuntu Linux v16.04 [4.4.0-109-generic or 4.13.0-26-generic]/v17.10 [4.13.0-25-generic]/14.04 [3.13.0-139-generic]
  9. SUSE – SLES 12 SP3 [4.4.103-6.38.1]/SLES 12 SP2 [4.4.103-92.59.1]/SLES 11 SP4 [3.0.101-108.21.1]/SLES 11 SP3-LTSS [3.0.101-0.47.106.11.1]


How to protect Linux server against the Meltdown vulnerability

You need to update kernel version and reboot the server. The following shows how to patch and apply updates for popular Linux distros.


Fix the Meltdown on a CentOS/RHEL/Fedora/Oracle/Scientific Linux

Type the following yum command:

$ uname -r
3.10.0-693.11.1.el7.x86_64
$ sudo yum update

You must reboot your Linux server using shutdown/reboot command:


$ sudo reboot
$ uname -r
3.10.0-693.11.6.el7.x86_64

Run the following dnf command if you are using a Fedora Linux:


$ sudo dnf --refresh update kernel

OR


sudo dnf update


Reboot the Linux box:

$ sudo reboot

Fix the Meltdown on a Debian/Ubuntu Linux

Use the following apt-get command/apt command:


$ uname -r
4.9.0-4-amd64
$ sudo apt-get update
## better run the following instead of 'sudo apt-get upgrade'
$ sudo apt-get dist-upgrade


Reboot the box:


$ sudo shutdown -r 0
$ uname -r
4.9.0-5-amd64


Fix the Meltdown on an Amazon Linux running on AWS

Just run yum command:


# yum update kernel
# reboot


Fix the Meltdown on an Arch Linux

Just run pacman command:


# pacman -Syu
# reboot



Fix the Meltdown on Suse Enterprise Linux Server 12-SP3


Execute the zypper command:


# zypper in -t patch SUSE-SLE-SERVER-12-SP3-2018-12=1
### [ To bring your system up-to-date ] ###
# zypper patch
# reboot

 

Was this answer helpful? 0 Users Found This Useful (0 Votes)