新型態Spectre v2攻擊手法影響搭載Intel處理器的Linux電腦
· 2024-04-15

研究人員揭露新型態的Spectre V2推測執行漏洞攻擊手法,並指出能在搭載最新世代Intel處理器的Linux電腦上,繞過原本Intel提出的緩解措施

阿姆斯特丹自由大學VUSec研究團隊揭露新型態的Spectre V2推測執行漏洞攻擊手法,他們透過自行開發的工具檢查電腦是否存在相關漏洞,結果發現在Linux核心有其他可利用的小器具(Garget),而且還能繞過所有Intel採取的Spectre緩解措施。

研究人員指出,這是首度發現存在於最新世代Intel處理器的Linux電腦的原生Spectre v2漏洞,攻擊者有可能以每秒3.5kb的資料量洩露核心記憶體的任意資料。

先前研究人員發現兩種Spectre v2攻擊手法,分別是稱做名為分支目標注入(Branch Target Injection,BTI)和分支歷史注入(Branch History Injection,BHI),而這次他們公布的發現,也與BHI有關,但與原先揭露的手法有所不同,因為它們不需依賴可在Linux系統核心執行的eBPF過濾器,使得原本Intel建議用戶的緩解措施無效。

未經身分驗證的攻擊者可利用新的漏洞,從而推測並跳躍至特定小器具,最終達到洩漏處理器占用的記憶體資料內容,這項弱點被登記為CVE-2024-2201,對此,Intel表示將在未來推出的處理器當中,藉由硬體機制緩解BHI弱點帶來的衝擊。

Popular articles
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
What’s on the SBC Summit Conference Agenda in 2026?
Marketing
GAT Expo Puerto Rico Will Pulse with the New Era of Gaming in the Caribbean
Marketing
British gambling levy rates confirmed for each vertical
Regulation
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
Manila delivers: Highlights from SiGMA Asia 2026 
Southeast Asia
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
Home
Game
Cooperation
Find
My