Latest Intel CPUs Affected by New TSX Speculative Attack

[[correlate]]

Content source

https://www.bleepingcomputer.com/news/security/latest-intel-cpus-affected-by-new-tsx-speculative-attack/

A new speculative vulnerability called ZombieLoad 2, or TSX Asynchronous Abort, has been disclosed today that targets the Transactional Synchronization Extensions (TSX) feature in Intel processors.
Using this vulnerability, local attackers or malware can steal sensitive data from the operating system kernel or other processes.
Performance in modern CPUs is increased through speculative execution, a feature that runs instructions in advance of knowing if they are needed or not. If they are required, the task completes faster, otherwise the data is discarded.
Attacks that target this feature are called speculative execution side-channel attacks.
In May 2019, new speculative execution attacks called RIDL, Fallout, and ZombieLoad were disclosed that could allow a malicious program to steal sensitive data from memory locations that normally they could not access. This is demonstrated in the ZombieLoad video below.
While microcodes and software-based protections were released to mitigate these older vulnerabilities, it was disclosed today that a new version of the ZombieLoad attacks can bypass current defenses and even affect processors in the Intel Cascade Lake CPU family.

Latest Intel CPUs Affected by New TSX Speculative Attack

A new speculative vulnerability called ZombieLoad 2, or TSX Asynchronous Abort, has been disclosed today that targets the Transactional Synchronization Extensions (TSX) feature in Intel processors.

www.bleepingcomputer.com

 

[Andy Ful]

Latest Intel CPUs Affected by New TSX Speculative Attack

A new speculative vulnerability called ZombieLoad 2, or TSX Asynchronous Abort, has been disclosed today that targets the Transactional Synchronization Extensions (TSX) feature in Intel processors.

www.bleepingcomputer.com

Next example of the golden rule: more usability always decrease security.

 

[[correlate]]

Next example of the golden rule: more usability always decrease security.

 

[[correlate]]

Intel CPUs that received hardware, software, and microcode fixes for various Spectre-related bugs are still vulnerable to a new speculative execution attack called ZombieLoad v2. This latest flaw in Intel’s chip design doesn’t make every single Core processor vulnerable, but it affects the latest few generations, from 2013’s Haswell architecture through

ZombieLoad V2 Hits Intel CPUs That Have Meltdown Hardware Fixes | Digital Trends

Intel is facing another speculative execution exploit known as ZombieLoad V2, a new variant of the MDS attack vector. This one affects even those that have hardware fixes against the Meltdown exploit, potentially requiring Intel to release yet another microcode fix for its flagship chips.

www.digitaltrends.com