Bug 1956602 - uOps: hw: spectre for uOPS
Summary: uOps: hw: spectre for uOPS
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 1959788 1959789 1959790 1957711 1958075 1958076 1958077 1958719 1958721
Blocks: 1956593
TreeView+ depends on / blocked
 
Reported: 2021-05-04 03:56 UTC by Wade Mealing
Modified: 2023-07-11 08:49 UTC (History)
37 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in modern CPU architecture have a side channel attack based on the cached value of micro-op caching. The highest threat from this vulnerability is to data confidentiality.
Clone Of:
Environment:
Last Closed: 2023-07-11 08:49:15 UTC
Embargoed:

Attachments (Terms of Use)

Description Wade Mealing 2021-05-04 03:56:11 UTC 
Modern Intel, AMD, and ARM processors translate the common assembly instructions into simpler internal micro-ops that are then cached on-chip structure called a micro-op cache. The "dead uOps" paper outlines possible attacks that exploit the micro-op cache as a timing channel to transmit secret information.

https://comparch.org/2021/05/01/i-see-dead-uops-thoughts-on-the-latest-spectre-paper-targeting-uop-caches/
Comment 6 Wade Mealing 2021-05-06 10:31:29 UTC 
Mitigation:

Mitigation for this issue is either not available or the currently available options does not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Comment 7 Wade Mealing 2021-05-06 10:45:46 UTC 
Created kernel tracking bugs for this issue:

Affects: fedora-all [bug 1957711]
Comment 36 Wade Mealing 2023-07-11 08:49:15 UTC 
Closing as I can't react to this in my new role.
Note You need to log in before you can comment on or make changes to this bug.