Wikner and Razavi’s research found that even with the IBPB defense, Intel’s processors still allow branch predictions to be reused, leading to security leaks.

“We found a microcode bug in recent Intel microarchitectures, like Golden Cove and Raptor Cove, which retains branch predictions that should have been invalidated by the IBPB,” the researchers noted. “Such post-barrier speculation allows an attacker to bypass security boundaries imposed by process contexts and virtual machines.”

The duo found that this flaw affects several Intel processors, including 12th, 13th, and 14th generation Intel Core processors and 5th and 6th generation Intel Xeon processors. These processors were specifically designed to address the vulnerabilities identified in earlier Spectre variants, but this newly discovered bug allows attackers to bypass those security defenses​.

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Apache OFBiz behebt neuen kritischen Fehler

Apache geht auf die Jagd nach eigenen Fehler und macht fette Beute. monticello – shutterstock.com Eine neue Sicherheitslücke in Apache OFBiz, einem Java-basierten ERP-Framework für Geschäftsprozesse wie Buchhaltung und E-Commerce, ermöglicht

QNAP fixes critical security holes in its networking solutions

Critical NAS read and code execution vulnerabilities Tracked as CVE-2024-38643, a missing authentication for critical function vulnerability in QNAP’s note-taking and collaboration application for its NAS devices, Notes Station 3,

Infostealers are using BYOVD to steal critical system data

While the payload included the promised functionality, which itself accounts for piracy, it also delivered “sophisticated” malware directly onto users’ computers. Because Foxit’s installation directory resides in the “Program Files”