Vulnerabilities in eBPF allow bypassing protection against Spectre attack 4.
Two vulnerabilities have been discovered in the Linux kernel that allow the eBPF subsystem to bypass protections against the Spectre v4 attack (SSB, Speculative Store Bypass). An attacker using an unprivileged BPF program can create conditions for speculative execution of certain operations and determine the contents of arbitrary kernel memory areas. The accompanying eBPF subsystems in the kernel have obtained access to a proof-of-concept exploit demonstrating the possibility of attacks […]
