TONTOU — támadás az Intel és AMD CPU-kon, amely lehetővé teszi a Spectre v2 sebezhetőségek elleni védelem megkerülését
A Massachusetts Institute of Technology study revealed the TONTOU (Time-of-Neutralization to Time-of-Use) attack technique, which offers a new method for exploiting microarchitectural vulnerabilities of the Spectre v2 class. This vulnerability allows the contents of the kernel memory to be determined while executing an exploit in user space. The code to block the exploitation of the vulnerability was included in the Linux kernel on August 5 and is included in the releases 7.1.7, 6.18.43, 6.12.102, 6.6.149, […]
