Wikner and Razavi’s research found that even with the IBPB defense, Intel’s processors still allow branch predictions to be reused, leading to security leaks.

“We found a microcode bug in recent Intel microarchitectures, like Golden Cove and Raptor Cove, which retains branch predictions that should have been invalidated by the IBPB,” the researchers noted. “Such post-barrier speculation allows an attacker to bypass security boundaries imposed by process contexts and virtual machines.”

The duo found that this flaw affects several Intel processors, including 12th, 13th, and 14th generation Intel Core processors and 5th and 6th generation Intel Xeon processors. These processors were specifically designed to address the vulnerabilities identified in earlier Spectre variants, but this newly discovered bug allows attackers to bypass those security defenses​.

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

CISOs who delayed patching Palo Alto vulnerabilities now face real threat

“Palo Alto Networks has observed threat activity exploiting an unauthenticated remote command execution vulnerability against a limited number of firewall management interfaces which are exposed to the Internet,” Palo Alto

QNAP fixes critical security holes in its networking solutions

Critical NAS read and code execution vulnerabilities Tracked as CVE-2024-38643, a missing authentication for critical function vulnerability in QNAP’s note-taking and collaboration application for its NAS devices, Notes Station 3,

Microsoft fails to collect critical security logs, exposing customers to risks

Widespread impact on security monitoring Microsoft acknowledged that the logging failure affected a range of key services. Microsoft Sentinel, a widely used security tool, suffered gaps in its logs, making