# MMIO Stale Data vulnerability

**URL:** <https://community.ipfire.org/t/mmio-stale-data-vulnerability/8810>\
**Category:** Security\
**Created:** [22 October 2022 11:25 UTC](https://community.ipfire.org/t/mmio-stale-data-vulnerability/8810 "2022-10-22T11:25:45Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![casabenedetti](https://community.ipfire.org/user_avatar/community.ipfire.org/casabenedetti/32/16594_2.png) [@casabenedetti](https://community.ipfire.org/u/casabenedetti)\
**Post date:** [22 October 2022 11:25 UTC](https://community.ipfire.org/t/mmio-stale-data-vulnerability/8810/1 "2022-10-22T11:25:45Z")

</div>

Greetings,  
I have updated IpFire to the latest version.  
On my machine, I now find myself with this new vulnerability in between  
“Processor Vulnerability Mitigations”:

MMIO Stale Data (CVE-2022-21123, CVE-2022-21125, CVE-2022-21127, CVE-2022-21166) --------- Unknown: No mitigations

I wanted to know about this vulnerability and if IpFire will be able to mitigate it in the future.  
Thank you in advance.

---

<div class="post-metadata">

**Author:** ![cbrown](https://community.ipfire.org/user_avatar/community.ipfire.org/cbrown/32/16342_2.png) [@cbrown](https://community.ipfire.org/u/cbrown)\
**Post date:** [22 October 2022 11:57 UTC](https://community.ipfire.org/t/mmio-stale-data-vulnerability/8810/2 "2022-10-22T11:57:12Z")

</div>

Same here. It seems Intel cannot be bothered with **too old** CPUs.  
[Linux Update Acknowledges Your Old Intel CPUs Might Be Vulnerable To MMIO Stale Data](https://www.phoronix.com/news/Linux-MMIO-Stale-Data-Old-CPUs)

---

<div class="post-metadata">

**Author:** ![bbitsch](https://community.ipfire.org/user_avatar/community.ipfire.org/bbitsch/32/7420_2.png) [@bbitsch](https://community.ipfire.org/u/bbitsch)\
**Post date:** [22 October 2022 20:10 UTC](https://community.ipfire.org/t/mmio-stale-data-vulnerability/8810/3 "2022-10-22T20:10:58Z")

</div>

Would be nice to know your CPUs. ( Fireinfo ID is a good hint )

---

<div class="post-metadata">

**Author:** ![cbrown](https://community.ipfire.org/user_avatar/community.ipfire.org/cbrown/32/16342_2.png) [@cbrown](https://community.ipfire.org/u/cbrown)\
**Post date:** [22 October 2022 21:27 UTC](https://community.ipfire.org/t/mmio-stale-data-vulnerability/8810/4 "2022-10-22T21:27:01Z")

</div>

Mine is showing **Unknown: No mitigations**  
[Fireinfo](https://fireinfo.ipfire.org/profile/af4e7c1aa3b870cfd177edcf64593dd04b9607d5)

---

<div class="post-metadata">

**Author:** ![casabenedetti](https://community.ipfire.org/user_avatar/community.ipfire.org/casabenedetti/32/16594_2.png) [@casabenedetti](https://community.ipfire.org/u/casabenedetti)\
**Post date:** [23 October 2022 15:47 UTC](https://community.ipfire.org/t/mmio-stale-data-vulnerability/8810/5 "2022-10-23T15:47:30Z")

</div>

Thank you so much for the immediate replies.

I activated my FireInfo:  
[https://fireinfo.ipfire.org/profile/732fef80c785b15598d2a3c2afb59b5bfa5c7885](https://fireinfo.ipfire.org/profile/732fef80c785b15598d2a3c2afb59b5bfa5c7885)  
You guessed it!!!  
My CPU is exactly  
Intel(R) Celeron(R) CPU J3160 @ 1.60GHz x4  
like the one of the cbrown ID.  
I have one more question: while using IpFire, is it ok to ignore this vulnerability actually?

Thanks in advance for any future answers.

---

<div class="post-metadata">

**Author:** ![bonnietwin](https://community.ipfire.org/user_avatar/community.ipfire.org/bonnietwin/32/12350_2.png) [@bonnietwin](https://community.ipfire.org/u/bonnietwin)\
**Post date:** [23 October 2022 16:33 UTC](https://community.ipfire.org/t/mmio-stale-data-vulnerability/8810/6 "2022-10-23T16:33:00Z")

</div>

> [@casabenedetti](#):
>
> while using IpFire, is it ok to ignore this vulnerability actually?

That is a difficult one to comment on. It very much depends on your network situation.

These hardware vulnerabilities typically require local access to your IPFire system and that, as far as I can see, is the case for the MMIO Stale Data vulnerability.

If your IPFire system is feeding a home network and you are the only person able to access the console system then it might be alright, presuming you are unlikely to be hacking yourself.

If your IPFire system is feeding a company network where a whole range of people might be able to access the console system who might have hacking skills then you might want to consider getting replacement hardware without the vulnerable processors that are not being mitigated by Intel.

Declaration - I am just a home user who is not deeply knowledgeable on these hardware vulnerabilities.  
I have luckily had to replace my hardware recently and it has an AMD processor and so is not vulnerable to this issue.