On Thu, Jan 4, 2018 at 3:08 PM, Subsentient <subsentient@universe2.us> wrote:
Hi, I'm surprised you haven't done so already, but you need to enable kernel/page table isolation in the i686 kernel immediately!

config PAGE_TABLE_ISOLATION
        bool "Remove the kernel mapping in user mode"
        default y
        depends on X86_64 && !UML

The code to do so doesn't exist. I am sure upstream would be happy to take the code if it did.
 
i686 is also vulnerable to the Meltdown and Spectre flaws in Intel CPUs, all Intel CPUs past 1995 are!
 

It is, but there is still a lot of work upstream happening.  If and when 32bit i686 patches are merged, we will turn it on.

Justin