Security News New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes

Security News
0 Replies 464 Views

Parkinsond

Level 67
Verified
Top Poster
Well-known
Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines.

The method works against Spectre v2 defenses on AMD and Intel processors that rely on sanitizing or isolating branch predictors, which researchers generically refer to as neutralization-based mitigations.

Spectre v2 is also known as Branch Target Injection (BTI) and is a variant of the Spectre class of vulnerabilities.

 

Recently browsing

Members who viewed this thread in the last 5 minutes

Back
Top