#spectre

#spectre

Academic researchers from Vrije Universiteit Amsterdam have demonstrated that transient execution CPU vulnerabilities are practical to exploit in real-world scenarios to leak memory from VMs running on public cloud services. The research shows that L1TF (L1 Terminal Fault), also known as Foreshadow, a bug in Intel processors reported in January 2018, and half-Spectre, gadgets believed unexploitable on new-generation CPUs, as they cannot directly leak secret data, can be used together to leak data from the public cloud.

"After discussion between Intel and Canonical's security teams, we are in agreement that Spectre no longer needs to be mitigated for the Ubuntu users on Intel systems."

Researchers have identified a critical new flaw in Intel's processors called Branch Predictor Race Conditions (BPRC), which could further exploit existing Spectre vulnerabilities.