[Dismas]

Retpoline didn't work. Intel and AMD are working on it...

Some microprocessors from Intel and AMD are vulnerable to a newly discovered speculative execution attack that can covertly leak password data and other sensitive material, sending both chipmakers scrambling once again to contain what is proving to be a stubbornly persistent vulnerability.

Researchers from ETH Zurich have named their attack Retbleed because it exploits a software defense known as retpoline, which was introduced in 2018 to mitigate the harmful effects of speculative execution attacks. Speculative execution attacks, including one known as Spectre, exploit the fact that when modern CPUs encounter a direct or indirect instruction branch, they predict the address for the next instruction they’re about to receive and automatically execute it before the prediction is confirmed. Spculative execution attacks works by tricking the CPU into executing an instruction that accesses sensitive data in memory that would normally be off-limits to a low-privileged application. Retbleed then extracts the data after the operation is canceled.

Read More: https://arstechnica.com/information-tech...on-attack/

[JohnnyDangerously]

Im diving therough this article rn seems legit

[Dismas]

THIS NEWS IS SURELY GONNA EFFECT INTEL STOCK PRICES

And AMD... and it's already patched...

[redeyex]

someone exploited it or not yet? i thing it finding every year.

[Mikeconcho69]

Any update on this particular issue?

[XImpalerX]

Do we need a firmware update or is this being patched via an OS update? It also sounds like the fix is going to slow down the CPU speed...

[Dismas]

Do we need a firmware update or is this being patched via an OS update? It also sounds like the fix is going to slow down the CPU speed...

Only Linux requires updates for these more recent ones, as there were pre-existing fixes for Windows. Linux kernels 5.18.14 and 5.19 contain the fixes.

For Aptitude:

Code:

sudo apt-get update
sudo apt-get dist-upgrade

For Pacman:

Code:

sudo pacman -Syu

[anone509]

this is really interesting, thank you for sharing