Linux

Nowy tydzień, nowe bugi w…

Nowy tydzień, nowe bugi w procesorach

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a7a248c593e4

TAA is a hardware vulnerability that allows unprivileged speculative access to data which is available in various CPU internal buffers by using asynchronous aborts within an Intel TSX transactional region.

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7f00cc8d4a51

iTLB multihit is an erratum where some processors may incur a machine check error, possibly resulting in an unrecoverable CPU lockup, when an instruction fetch hits multiple entries in the instruction TLB. This can occur when the page size is changed along with either the physical address or cache type. A malicious guest running on a virtualized system can exploit this erratum to perform a denial of service attack.

https://lwn.net/Articles/804462

#linux #security #kernel #programista15k #programowanie #intel