Simple script to check if your Linux machine is vulnerable to #Meltdown

Am I affected by Meltdown?! Meltdown (CVE-2017-5754) checker

What am I?

Proof-of-concept /

Exploit /

Checks whether the system is affected by Variant 3: rogue data cache load (CVE-2017-5754), a.k.a MELTDOWN.

*** Only works on Linux for now ***

How does it work?

It works by using /proc/kallsyms to find system call table and checking whether the address of a system call found by exploiting MELTDOWN match the respective one in /proc/kallsyms.

What to do when you face this error “Unable to read /proc/kallsyms…”

That’s because your system may be preventing the program from reading kernel symbols in /proc/kallsyms due to /proc/sys/kernel/kptr_restrict set to 1. The following command will do the trick:

sudo sh -c “echo 0 > /proc/sys/kernel/kptr_restrict”

Please open an issue if you have an idea on how to fall back to another approach in this scenario.

Getting started

git clone https://github.com/raphaelsc/Am-I-affected-by-Meltdown.git
cd Am-I-affected-by-Meltdown
make

Copyright (c) 2018 Raphael S. Carvalho <raphaelsc@scylladb.com>

Source: https://github.com/raphaelsc/