CVE-2020-0551 Intel

[Mackguil]

On some processors, faulting or assisting load operations may transiently receive data from a microarchitectural buffer.

If an adversary can cause a specified victim load to fault, assist, or abort, the adversary may be able to select the data to have forwarded to dependent operations by the faulting/assisting/aborting load. For certain code sequences, those dependent operations may create a covert channel with data of interest to the adversary. The adversary may then be able to infer the data's value through analyzing the covert channel. This transient execution attack is called load value injection (LVI) and is an example of a cross-domain transient execution attack.

Because LVI methods requires several complex steps to be chained together when the victim is executing, it is primarily applicable to synthetic victim code developed by researchers or attacks against SGX by a malicious operating systems (OSes) or virtual machine managers (VMMs).

Source: https://software.intel.com/security-sof ... -injection

[Unix-Linux]

Intel Powa

[Rodrigue]

Intel Powa

je ne suis pas content intel y a une vulnéraire !! :(

[Unix-Linux]

Tu m'épates toujours roro !

Vulnéraire, du latin vulnerarius (de vulnus, blessure).

Ne pas confondre avec vulvaire.