As cited
Copy frozen at (site build).
vulnerabilities
New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
MIT CSAIL researchers discovered an interrupt injection attack that can bypass Spectre v2 defenses on Intel and AMD CPUs by timing a hardware interrupt to re-poison the branch predictor after kernel sanitization. An unprivileged Linux program can exploit the window between when the processor clears the branch predictor and when the kernel uses it, potentially allowing an attacker to restore speculative execution gadgets.
Why it matters: Practitioners running Intel or AMD systems with default Spectre v2 mitigations need to monitor for patches and re-evaluate branch predictor defenses, as this attack demonstrates that current kernel-level protections may have timing-based bypasses.
- Source published
- First seen by Cybersecurity Tracker