VulnerabilityBleeping Computer
9.0 — CRITICAL
New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes
Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Researchers discovered a TONTOU CPU attack that bypasses Spectre v2 fixes, allowing attackers to leak Linux password hashes and exploit indirect branch predictors on AMD and Intel processors.
⚙️Technical Details
💥Impact Assessment
Severity: critical
Who Is at Risk
Linux systems with Spectre v2 mitigations, particularly those with unprivileged user programs
🛡️Recommended Actions
1Implement and regularly update Spectre v2 mitigations on affected systems
2Monitor system logs for suspicious activity related to interrupt injection
3Conduct regular security audits to identify and address potential vulnerabilities
📦Affected Products
Operating System: LinuxHardware: AMD Zen 2 processors, Intel processors with Spectre v2 mitigations
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.