Cov ntaub ntawv tau tshaj tawm txog qhov kev tawm tsam tshiab ntawm Intel cov txheej txheem - AEPIC Leak (CVE-2022-21233), uas ua rau cov ntaub ntawv tsis pub lwm tus paub los ntawm cais Intel SGX (Software Guard eXtensions) enclaves. Qhov teeb meem cuam tshuam rau 10th, 11th, thiab 12th tiam ntawm Intel CPUs (xws li Ice Lake thiab Alder Lake tshiab series) thiab yog tshwm sim los ntawm kev ua vaj tse tsis zoo uas tso cai rau kev nkag mus rau cov ntaub ntawv tsis tseem ceeb hauv APIC (Advanced Programmable Interrupt Controller) sau npe tom qab dhau los. kev ua haujlwm.
Tsis zoo li Spectre chav kawm tawm tsam, qhov xau hauv AEPIC Leak tshwm sim yam tsis muaj kev siv cov txheej txheem rov qab los ntawm cov neeg sab nrauv - cov ntaub ntawv hais txog cov ntaub ntawv tsis pub lwm tus paub yog xa ncaj qha los ntawm kev tau txais cov ntsiab lus ntawm cov ntawv sau npe cuam tshuam hauv MMIO (memory-mapped I/O) nplooj ntawv nco . Feem ntau, qhov kev tawm tsam tso cai rau koj los txiav txim siab cov ntaub ntawv hloov pauv ntawm cov caches ntawm qib thib ob thiab kawg, suav nrog cov ntsiab lus ntawm cov ntawv sau npe thiab cov txiaj ntsig ntawm kev nyeem cov haujlwm ntawm lub cim xeeb, uas tau ua dhau los ntawm tib CPU core.
Txij li thaum txhawm rau ua qhov kev tawm tsam nws yog qhov yuav tsum tau nkag mus rau nplooj ntawv lub cev ntawm APIC MMIO, i.e. xav tau cov cai tswj hwm, txoj hauv kev yog txwv rau kev tawm tsam SGX enclaves uas tus thawj coj tsis muaj kev nkag ncaj qha. Cov kws tshawb fawb tau tsim cov cuab yeej uas tso cai rau lawv txheeb xyuas AES-NI thiab RSA cov yuam sij khaws cia hauv SGX, nrog rau Intel SGX cov ntawv pov thawj cov yuam sij thiab cov lej sib txawv ntawm lub tshuab hluav taws xob tsis pub dhau ob peb feeb. Cov cai rau kev tawm tsam tau tshaj tawm ntawm GitHub.
Intel tau tshaj tawm txog kev txhim kho nyob rau hauv daim ntawv ntawm microcode hloov tshiab uas yuav siv kev txhawb nqa rau kev tsis sib haum xeeb thiab ntxiv cov kev ntsuas ntxiv los tiv thaiv cov ntaub ntawv enclave. SDK tshiab tso tawm rau Intel SGX kuj tau npaj nrog kev hloov pauv los tiv thaiv cov ntaub ntawv xau. Cov tsim tawm ntawm kev khiav hauj lwm systems thiab hypervisors raug pom zoo kom siv x2APIC hom es tsis txhob ntawm txoj cai xAPIC hom, nyob rau hauv uas MSR sau npe siv MMIO rau nkag mus rau APIC cov npe.
Tau qhov twg los: opennet.ru