Home  >  Article  >  Hardware Tutorial  >  Intel fixes Indirector side-channel vulnerability: affects 12th/13th generation processors and can leak sensitive data

Intel fixes Indirector side-channel vulnerability: affects 12th/13th generation processors and can leak sensitive data

WBOY
WBOYOriginal
2024-07-12 13:19:531099browse

According to news from this website on July 4, security experts have recently disclosed the Indirector vulnerability, which affects Intel Raptor Lake and Alder Lake processors. It is a new side-channel attack that can steal sensitive information in the processor.

英特尔修复 Indirector 侧信道漏洞:影响第 12/13 代处理器,可泄露敏感数据

The good news is that after receiving the notification in February this year, Intel released a fix patch and notified other system providers, deploying BHI and IBRS / eIBRS mitigation measures.

Security researchers Luyi Li, Hosein Yavarzadeh and Dean Tullsen named the attack Indirector.

This site learned from reports that the vulnerability exploits flaws found in the Indirect Branch Predictor (IBP) and Branch Target Buffer (BTB) to bypass existing defense measures and undermine the security of the CPU.

英特尔修复 Indirector 侧信道漏洞:影响第 12/13 代处理器,可泄露敏感数据

Indirector attacks target the processor's indirect branch predictor, illegally disclosing information via a side channel to an attacker with local user access.

The research team developed a tool called "iBranch Locator" that can effectively identify and manipulate specific branches in IBP. This tool enables highly precise BTI attacks that can compromise security in a variety of scenarios, including cross-process and cross-privilege environments.

The above is the detailed content of Intel fixes Indirector side-channel vulnerability: affects 12th/13th generation processors and can leak sensitive data. For more information, please follow other related articles on the PHP Chinese website!

Statement:
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn