search

speed47 / spectre-meltdown-checker

Reptar, Downfall, Zenbleed, ZombieLoad, RIDL, Fallout, Foreshadow, Spectre, Meltdown vulnerability/mitigation checker for Linux & BSD
3.85k stars 476 forks source link

New spectre disclosed: spectreRSB #224

Open Potato-Matic opened 6 years ago

Potato-Matic commented 6 years ago

There's been another spectre variant disclosed, in addition to spectre 1.1 and 1.2 called spectreRSB.

https://www.phoronix.com/scan.php?page=news_item&px=SpectreRSB-Linux-Patch

Potato-Matic commented 6 years ago

Based on the early patch proposals, it looks like this one will be mitigated by getting the kernel to stuff the RSB in a bunch of different places, as is done on skylake to avoid underflow of the RSB during retpoline-based mitigation as well as some transitions where call stack depths are problematic. Looks like IBPB might be involved too though.