Spectre & Meltdown Checker is a shell script that assesses system resilience against transient execution CPU vulnerabilities.
The tool addresses the problem of determining whether a Linux or BSD system is vulnerable to a range of CPU-level exploits including Spectre, Meltdown, and related variants. It works by running a self-contained shell script that checks the system's current mitigations and reports on exposure to specific CVEs. The script provides guidance on how to address any identified vulnerabilities.
System administrators and security-conscious users should choose this tool when they need to understand their system's vulnerability posture against transient execution attacks. It suits any Linux or BSD deployment where CPU security is a concern, from personal machines to production servers. The tool is particularly valuable for systems that may have been deployed before these vulnerability classes were widely understood, or where mitigation status is uncertain.
The project maintains active engagement with newly discovered vulnerabilities in this class, regularly adding checks for emerging threats as they are disclosed. The codebase remains responsive to the evolving landscape of transient execution exploits, incorporating detection for variants that continue to surface.