Back to home
Technology

Compromising Spectre v2 HW Mitigations By Exploiting BPRC (ETH Zurich)

Source

SemiEngineering

Published

TL;DR

AI Generated

Researchers at ETH Zurich published a paper on exploiting Branch Predictor Race Conditions (BPRC) to compromise Spectre v2 hardware mitigations in recent Intel CPUs. The study introduces Branch Privilege Injection (BPI), a new Spectre v2 primitive that allows injecting arbitrary branch predictions tagged with kernel privilege from user mode. This exploit can leak arbitrary kernel memory from up-to-date Linux systems across six generations of Intel CPUs. The BPI exploit operates at a speed of 5.6KiB/s on Intel Raptor Cove processors. The findings were presented at the USENIX Security Symposium in August 2025.

Read Full Article

Similar Articles

Intel and AMD trusted enclaves, the backbone of network security, fall to physical attacks

Intel and AMD trusted enclaves, the backbone of network security, fall to physical attacks

Intel and AMD's trusted enclaves, crucial for network security, have been vulnerable to physical attacks, compromising the confidentiality of data stored in the cloud. Researchers have exposed limitations in Intel's SGX and AMD's SEV-SNP protections, with attacks like Battering RAM allowing manipulation of encrypted data and Wiretap decrypting sensitive information. These attacks leverage deterministic encryption and a hardware interposer placed between the CPU and memory module to intercept data. The vulnerabilities highlight ongoing challenges in securing data within cloud environments.

Ars Technica
Dr. L.C. Lu on TSMC Advanced Technology Design Solutions

Dr. L.C. Lu on TSMC Advanced Technology Design Solutions

Dr. L.C. Lu, a key figure at TSMC, focuses on design-technology co-optimization, packaging innovations, and AI-driven methodologies for next-gen semiconductor systems. TSMC emphasizes DTCO and DDCL innovations for scaling from N5 to A14 nodes, with NanoFlex and NanoFlex Pro architectures offering efficiency gains. N2P and N2U nodes incorporate advanced DTCO and power delivery optimizations, with hybrid dual-rail architectures achieving significant energy savings. TSMC collaborates with EDA partners for AI integration, enhancing productivity and design quality. Advanced packaging technologies like CoWoS and SoIC play a crucial role in enabling AI scaling, with memory bandwidth and interconnect performance scaling aggressively. TSMC addresses power delivery and thermal management challenges in AI systems through advanced solutions. TSMC's advancements in design methodologies and AI-driven automation promise improved productivity and scalability in chip-package co-design.

SemiWiki
MindsEye's sabotage mission is being slammed as dull and pointless

MindsEye's sabotage mission is being slammed as dull and pointless

Build A Rocket Boy accuses individuals of sabotaging MindsEye's launch, spending over €1 million on damaging efforts. The studio integrates the controversy into a new in-game mission, Blacklist, to showcase evidence of sabotage to players. However, reports describe the mission as lackluster and failing to deliver a compelling narrative. Critics attribute the launch issues to internal problems, such as management and design decisions, casting doubt on the sabotage claims. The saga continues as MindsEye's post-launch turmoil unfolds.

TweakTown
3DPrint.com

The Additive Chicken Coop, Part II: Rescoping

The article discusses the second part of the Additive Chicken Coop project, focusing on rescaling the project. It highlights the challenges faced in enabling JavaScript and cookies to continue reading the content. The article provides insights into the technical aspects of the project and the strategies employed to address the issues encountered during the rescaling process.

3DPrint.com

We use cookies

We use cookies to ensure you get the best experience on our website. For more information on how we use cookies, please see our cookie policy.