New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs

An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run.

MIT CSAIL researchers Daniël Trujillo and Mengjia Yan named the technique INTERRUPT INJECTION. On an AMD Zen 2 machine running Linux 6.14 with every default Spectre v2 mitigation on,

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses

Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses Cybersecurity researchers have disclosed a security issue with Apple’s iCloud Private Relay tool that can expose a user’s

AI migrated legacy COBOL programs to Java, bugs included

AI migrated legacy COBOL programs to Java, bugs included Source: Hacker News

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver