Then there's the branch target misprediction attack; it seems to rely a lot on the details of Intel branch prediction, but it's unclear whether other CPUs are affected by variants of it. Maybe this is patchable in microcode?
Show this thread
On first glance it looks like many CPUs are vulnerable to same-privilege mis-speculation leaks (e.g. in JIT engines - disable eBPF jit if you have it enabled), but Intel has the real SNAFU in letting it leak across privilege modes.
-
-
-
Looks like it is. "Intel has also started releasing microcode updates that basically add some chicken bits and also let you flush branch predictor state to handle the context switch case." https://lkml.org/lkml/2018/1/3/859 …
Show this thread -
But apparently it's horribly slow on existing CPUs, due to restrictions on what they can do in microcode. Newer ones will come with a performant IBRS instruction to invalidate branch prediction state.
Show this thread
End of conversation
New conversation -
-
-
Google P0 seems to know it affects other architectures but they aren't saying which: https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html?m=1 …
-
ARM says some of their cores are affected in their bulletin, though we don't know what the performance impact of KPTI is on those arches.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.