{"id":36892,"date":"2019-10-31T22:14:35","date_gmt":"2019-10-31T19:14:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu\/"},"modified":"2019-10-31T22:14:35","modified_gmt":"2019-10-31T19:14:35","slug":"swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu","title":{"rendered":"SWAPGS \u2014 nov\u00e1 zranitelnost ve mechanismu spekulativn\u00edho vykon\u00e1v\u00e1n\u00ed CPU","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V\u00fdzkumn\u00edci ze spole\u010dnosti Bitdefender <noindex><a rel=\"nofollow\" href=\"https:\/\/www.bitdefender.com\/business\/swapgs-attack.html\">odhalili<\/a><\/noindex> novou zranitelnost (<noindex><a rel=\"nofollow\" href=\"https:\/\/security-tracker.debian.org\/tracker\/CVE-2019-1125\">CVE-2019-1125<\/a><\/noindex>) ve mechanismu spekulativn\u00edho vykon\u00e1v\u00e1n\u00ed instrukc\u00ed modern\u00edch CPU, kter\u00e1 z\u00edskala n\u00e1zev SWAPGS, odpov\u00eddaj\u00edc\u00ed n\u00e1zvu procesorov\u00e9 instrukce, kter\u00e1 probl\u00e9m vyvol\u00e1v\u00e1. Zranitelnost <noindex><a rel=\"nofollow\" href=\"https:\/\/access.redhat.com\/articles\/4329821\">umo\u017e\u0148uje<\/a><\/noindex> nedprivilegovan\u00e9mu \u00fato\u010dn\u00edkovi umo\u017e\u0148uje ur\u010dit obsah oblast\u00ed pam\u011bti j\u00e1dra nebo spu\u0161t\u011bn\u00fdch virtu\u00e1ln\u00edch stroj\u016f. Probl\u00e9m <noindex><a rel=\"nofollow\" href=\"https:\/\/software.intel.com\/security-software-guidance\/insights\/more-information-swapgs-and-speculative-only-segment-loads\">byla potvrzena<\/a><\/noindex> v procesorech Intel (x86_64) a \u010d\u00e1ste\u010dn\u011b <noindex>ovliv\u0148uje<\/noindex> v procesorech AMD, u kter\u00fdch nenast\u00e1v\u00e1 hlavn\u00ed vektor \u00fatoku. D\u0159\u00edve realizovan\u00e9 metody proti zranitelnostem Spectre a Meltdown nechr\u00e1n\u00ed p\u0159ed \u00fatokem SWAPGS p\u0159i pou\u017eit\u00ed procesor\u016f Intel, ale pro Linux, ChromeOS, Android a Windows ji\u017e byly navr\u017eeny opravy.<\/p>\n<p>Zranitelnost pat\u0159\u00ed do t\u0159\u00eddy Spectre v1 a vych\u00e1z\u00ed z my\u0161lenky obnovit data z procesorov\u00e9 cache, kter\u00e1 z\u016fstala po spekulativn\u00edm vykon\u00e1v\u00e1n\u00ed instrukc\u00ed. Bloky p\u0159edpov\u00edd\u00e1n\u00ed p\u0159echod\u016f modern\u00edch CPU pro zv\u00fd\u0161en\u00ed v\u00fdkonu pou\u017e\u00edvaj\u00ed p\u0159edb\u011b\u017en\u00e9 vykon\u00e1v\u00e1n\u00ed n\u011bkter\u00fdch instrukc\u00ed, kter\u00e9 pravd\u011bpodobn\u011b budou vykon\u00e1ny, av\u0161ak ne\u010dekaj\u00ed na v\u00fdpo\u010dty v\u0161ech faktor\u016f ur\u010duj\u00edc\u00edch jejich vykon\u00e1n\u00ed (nap\u0159. kdy\u017e je\u0161t\u011b nejsou vypo\u010d\u00edt\u00e1ny podm\u00ednky p\u0159echodu nebo parametry p\u0159\u00edstupu). Pokud progn\u00f3za nen\u00ed potvrzena, procesor odm\u00edt\u00e1 v\u00fdsledek spekulativn\u00edho vykon\u00e1v\u00e1n\u00ed, ale zpracovan\u00e1 data v jeho pr\u016fb\u011bhu z\u016fst\u00e1vaj\u00ed v procesorov\u00e9 cache a mohou b\u00fdt obnovena pomoc\u00ed metod ur\u010den\u00ed obsahu cache prost\u0159ednictv\u00edm bo\u010dn\u00edch kan\u00e1l\u016f, analyzuj\u00edc\u00edch zm\u011bnu \u010dasu p\u0159\u00edstupu k cachovan\u00fdm a necacheovan\u00fdm dat\u016fm. <\/p>\n<p>Specifikum nov\u00e9ho \u00fatoku spo\u010d\u00edv\u00e1 v vyu\u017eit\u00ed \u00faniku, kter\u00fd vznik\u00e1 b\u011bhem spekulativn\u00edho vykon\u00e1v\u00e1n\u00ed instrukce SWAPGS, je\u017e se pou\u017e\u00edv\u00e1 v opera\u010dn\u00edch syst\u00e9mech k nahrazen\u00ed hodnoty registru GS p\u0159i p\u0159echodu \u0159\u00edzen\u00ed z prostoru u\u017eivatele do j\u00e1dra OS (pou\u017e\u00edvan\u00e1 hodnota GS v prostoru u\u017eivatele je nahrazena hodnotou, kter\u00e1 se pou\u017e\u00edv\u00e1 p\u0159i operac\u00edch v j\u00e1d\u0159e). V j\u00e1d\u0159e Linux je v GS ulo\u017een ukazatel per_cpu, kter\u00fd se pou\u017e\u00edv\u00e1 pro p\u0159\u00edstup k dat\u016fm j\u00e1dra, a v prostoru u\u017eivatele jsou ukazatele na TLS (Thread Local Storage). <\/p>\n<p>Aby se vylou\u010dilo dvoj\u00ed vol\u00e1n\u00ed instrukce SWAPGS p\u0159i op\u011btovn\u00e9m vol\u00e1n\u00ed j\u00e1dra ze souborov\u00e9ho prostoru j\u00e1dra nebo kdy\u017e se vykon\u00e1v\u00e1 k\u00f3d, kter\u00fd nevy\u017eaduje zm\u011bnu registru GS, prov\u00e1d\u00ed se p\u0159ed instrukc\u00ed kontrola a podm\u00edn\u011bn\u00fd skok. Mechanismus spekulativn\u00edho prov\u00e1d\u011bn\u00ed p\u0159edem p\u0159ech\u00e1z\u00ed k prov\u00e1d\u011bn\u00ed k\u00f3du s instrukc\u00ed SWAPGS, ani\u017e by \u010dekal na v\u00fdsledek kontroly, a pokud vybran\u00fd v\u011btev nebyla potvrzena, v\u00fdsledek je odm\u00edtnut. Takto m\u016f\u017ee nastat situace, kdy spekulativn\u011b je vybr\u00e1na v\u011btev, kter\u00e1 nepo\u010d\u00edt\u00e1 s vykon\u00e1v\u00e1n\u00edm SWAPGS, ale v pr\u016fb\u011bhu spekulativn\u00edho vykon\u00e1v\u00e1n\u00ed bude hodnota registru GS zm\u011bn\u011bna instrukc\u00ed SWAPGS a pou\u017eita v z\u00e1visl\u00fdch operac\u00edch s pam\u011bt\u00ed, kter\u00e9 se usazuj\u00ed v ke\u0161i CPU. <\/p>\n<p>V\u00fdzkumn\u00edci navrhli dva sc\u00e9n\u00e1\u0159e \u00fatoku, pro kter\u00e9 byly p\u0159ipraveny prototypy exploit\u016f. Prvn\u00ed sc\u00e9n\u00e1\u0159 vych\u00e1z\u00ed ze situace, kdy instrukce SWAPGS nen\u00ed vykon\u00e1v\u00e1na spekulativn\u011b, a\u010dkoliv je pou\u017eita p\u0159i skute\u010dn\u00e9m prov\u00e1d\u011bn\u00ed, a druh\u00fd \u2014 naopak, kdy\u017e je instrukce SWAPGS vykon\u00e1v\u00e1na spekulativn\u011b, a\u010dkoli by nem\u011bla. Pro ka\u017ed\u00fd sc\u00e9n\u00e1\u0159 jsou p\u0159ipraveny dv\u011b varianty exploitace: \u00fato\u010dn\u00edk m\u016f\u017ee ur\u010dit hodnotu na konkr\u00e9tn\u00ed adrese v oblasti j\u00e1dra a \u00fato\u010dn\u00edk m\u016f\u017ee prov\u00e9st vyhled\u00e1v\u00e1n\u00ed ur\u010dit\u00e9 hodnoty na n\u00e1hodn\u00fdch adres\u00e1ch v j\u00e1d\u0159e. Prov\u00e1d\u011bn\u00ed \u00fatoku zabere hodn\u011b \u010dasu a pro organizaci \u00faniku m\u016f\u017ee b\u00fdt t\u0159eba prov\u00e1d\u011bt exploit po n\u011bkolik hodin. <\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"S-m7XVBzusU\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/S-m7XVBzusU\/hqdefault.jpg\" alt=\"P\u0159ehr\u00e1t video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p>V j\u00e1d\u0159e Linux je probl\u00e9m <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=18ec54fdd6d18d92025af097cd042a75cf0ea24c\">odstran\u011bna<\/a><\/noindex> zm\u011bnou logiky vol\u00e1n\u00ed instrukce SWAPGS (blokov\u00e1n\u00ed spekulativn\u00edho prov\u00e1d\u011bn\u00ed), obdobn\u011b jako opravy dal\u0161\u00edch zranitelnost\u00ed t\u0159\u00eddy Spectre v1. P\u0159edpokl\u00e1d\u00e1 se, \u017ee p\u0159idan\u00e1 ochrana minim\u00e1ln\u011b ovlivn\u00ed v\u00fdkon typick\u00fdch pracovn\u00edch z\u00e1t\u011b\u017e\u00ed. Zpo\u017ed\u011bn\u00ed nast\u00e1v\u00e1 b\u011bhem p\u0159ep\u00edn\u00e1n\u00ed mezi u\u017eivatelsk\u00fdm prostorem a j\u00e1drem, co\u017e m\u016f\u017ee v\u00e9st ke sn\u00ed\u017een\u00ed v\u00fdkonu, nap\u0159\u00edklad p\u0159i intenzivn\u00edm prov\u00e1d\u011bn\u00ed syst\u00e9mov\u00fdch vol\u00e1n\u00ed z aplikace nebo \u010dast\u00e9 generov\u00e1n\u00ed NMI a p\u0159eru\u0161en\u00ed. <\/p>\n<p>Oprava vy\u017eaduje instalaci aktualizace j\u00e1dra jak na hlavn\u00edm syst\u00e9mu, tak v hostitelsk\u00fdch prost\u0159ed\u00edch, s n\u00e1sledn\u00fdm restartem syst\u00e9mu. Pro deaktivaci ochrany v Linuxu m\u016f\u017ee b\u00fdt pou\u017eita volba \u201enospectre_v1\u201c, kter\u00e1 tak\u00e9 deaktivuje opat\u0159en\u00ed k blokov\u00e1n\u00ed zranitelnosti SWAPGS. Oprava je k dispozici ve form\u011b <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=18ec54fdd6d18d92025af097cd042a75cf0ea24c\">patche<\/a><\/noindex> pro j\u00e1dro Linux, kter\u00e9 je ji\u017e sou\u010d\u00e1st\u00ed vyd\u00e1n\u00ed <noindex><a rel=\"nofollow\" href=\"https:\/\/cdn.kernel.org\/pub\/linux\/kernel\/v4.x\/ChangeLog-4.19.65\">4.19.65<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/cdn.kernel.org\/pub\/linux\/kernel\/v5.x\/ChangeLog-5.2.7\">5.2.7<\/a><\/noindex>, 4.14.137,  4.9.188 a  4.4.188. Aktualizace pro distribuce Linux zat\u00edm nebyly vyd\u00e1ny (<noindex><a rel=\"nofollow\" href=\"https:\/\/security-tracker.debian.org\/tracker\/CVE-2019-1125\">Debian<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=CVE-2019-1125\">RHEL<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=1738285\">Fedora<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/security.archlinux.org\/CVE-2019-1125\">Arch Linux<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.novell.com\/show_bug.cgi?id=CVE-2019-1125\">SUSE\/openSUSE<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/people.canonical.com\/~ubuntu-security\/cve\/2019\/CVE-2019-1125.html\">Ubuntu<\/a><\/noindex>). Probl\u00e9m ve Windows byl bez zbyte\u010dn\u00e9ho povyku odstran\u011bn v <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1125\">\u010dervnov\u00e9 aktualizaci<\/a><\/noindex>. Spole\u010dnost Google <noindex><a rel=\"nofollow\" href=\"https:\/\/chromium-review.googlesource.com\/c\/chromiumos\/third_party\/kernel\/+\/1739575\">p\u0159ipravila<\/a><\/noindex> opravila j\u00e1dro 4.19 dod\u00e1van\u00e9 v ChromeOS a <noindex><a rel=\"nofollow\" href=\"https:\/\/android-review.googlesource.com\/c\/kernel\/common\/+\/1097435\">Android<\/a><\/noindex>.<\/p>\n<p>Podle tvrzen\u00ed v\u00fdzkumn\u00edk\u016f ze spole\u010dnosti Bitdefender byl Intel o probl\u00e9mu informov\u00e1n u\u017e v srpnu minul\u00e9ho roku. Probl\u00e9m bylo rozhodnuto odstranit softwarov\u011b, k \u010demu\u017e byli p\u0159izv\u00e1ni v\u00fdvoj\u00e1\u0159i z Microsoftu, Google a j\u00e1dra Linux. Star\u0161\u00ed procesory Intel, p\u0159ed Ivy Bridge, jsou napad\u00e1ny v\u00fdrazn\u011b obt\u00ed\u017en\u011bji kv\u016fli absenci podpory instrukce WRGSBASE, kter\u00e1 byla vyu\u017eita v exploitu. Syst\u00e9my ARM, POWER, SPARC, MIPS a RISC-V probl\u00e9mem nejsou dot\u010deny, proto\u017ee instrukci SWAPGS nepodporuj\u00ed.<\/p>\n<p>Probl\u00e9m hroz\u00ed p\u0159edev\u0161\u00edm dr\u017eitel\u016fm procesor\u016f Intel \u2014<br \/>\n na syst\u00e9mech AMD se poda\u0159ilo reprodukovat pouze druh\u00fd sc\u00e9n\u00e1\u0159 \u00fatoku, kter\u00fd se omezuje na spekulativn\u00ed zpracov\u00e1n\u00ed z\u00e1kladn\u00ed hodnoty registru GS, co\u017e lze pou\u017e\u00edt k vyhled\u00e1v\u00e1n\u00ed ur\u010dit\u00fdch hodnot v n\u00e1hodn\u00fdch oblastech pam\u011bti. Pro zablokov\u00e1n\u00ed t\u00e9to varianty \u00fatoku <noindex>sta\u010d\u00ed<\/noindex> existuj\u00ed metody ochrany proti zranitelnostem Spectre v1. <\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Zdroj: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51234\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-1125) \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 CPU, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u043c\u044f SWAPGS, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043d\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel (x86_64) \u0438 \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b AMD, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36892","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47SWAPGS \u2014 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f CPU | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:14:35+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:14:35+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47SWAPGS \u2014 nov\u00e1 zranitelnost v mechanismu spekulativn\u00edho prov\u00e1d\u011bn\u00ed CPU | ProHoster","description":"V\u00fdzkumn\u00edci ze spole\u010dnosti Bitdefender objevili novou zranitelnost (","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47SWAPGS \u2014 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f CPU | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:14:35+00:00","article:modified_time":"2019-10-31T19:14:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36892","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 05:14:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:37:22","updated":"2026-01-22 05:14:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=36892"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/36892\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=36892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=36892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=36892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}