Timeline for What is known about the latest vulnerability related to Linux Page Table Isolation patches? [duplicate]
Current License: CC BY-SA 3.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 1, 2018 at 9:55 | history | closed |
user165253 Steffen Ullrich Rory Alsop♦ |
Duplicate of Meltdown and Spectre Attacks | |
| Mar 31, 2018 at 5:35 | review | Close votes | |||
| Apr 1, 2018 at 9:55 | |||||
| Feb 18, 2018 at 21:43 | history | tweeted | twitter.com/StackSecurity/status/965341118777970688 | ||
| Jan 3, 2018 at 21:22 | comment | added | d33tah | I would also like to hear a commentary on claims presented here: news.ycombinator.com/item?id=16064545 | |
| Jan 3, 2018 at 4:30 | comment | added | David | The vulnerability appears to be embargoed at this time, so it's unlikely you'll find much information beyond speculation and the patches. | |
| Jan 3, 2018 at 3:09 | comment | added | forest | Judging by these linked resources, it's 1) related to speculative execution, 2) does not affect AMD processors, 3) is mitigated by page table splitting, and 4) requires fixing the hardware for a complete fix. It seems that it's either a nasty side-channel attack for determining the location of the kernel base address (likely, and not a really big deal), a method of breaking out of or violating integrity/confidentiality guarantees of VMs (also very possible), or allowing arbitrary memory reads via speculative execution (unlikely, but of truly apocalyptic impact if true). | |
| Jan 2, 2018 at 21:44 | comment | added | d33tah | Here's another surprisingly well-organised article: theregister.co.uk/2018/01/02/intel_cpu_design_flaw (found in Reddit post from @PSaul) | |
| Jan 2, 2018 at 21:23 | comment | added | d33tah | @PSaul: might be a clue, let's see what others say about it. | |
| Jan 2, 2018 at 21:21 | comment | added | PSaul | I saw that too, and I can't claim to be an expert of this (potential) exploit but it appears to be related to the chatter on this reddit: reddit.com/r/sysadmin/comments/7nl8r0/intel_bug_incoming Does that help any? | |
| Jan 2, 2018 at 21:09 | history | asked | d33tah | CC BY-SA 3.0 |