{"id":36892,"date":"2019-10-31T22:14:35","date_gmt":"2019-10-31T19:14:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu\/"},"modified":"2019-10-31T22:14:35","modified_gmt":"2019-10-31T19:14:35","slug":"swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu","title":{"rendered":"SWAPGS \u2014 \u00faj s\u00e9r\u00fcl\u00e9kenys\u00e9g a CPU spekulat\u00edv v\u00e9grehajt\u00e1si mechanizmus\u00e1ban","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A Bitdefender kutat\u00e1sai szerint <noindex><a rel=\"nofollow\" href=\"https:\/\/www.bitdefender.com\/business\/swapgs-attack.html\">felfedeztek<\/a><\/noindex> \u00faj sebezhet\u0151s\u00e9g (<noindex><a rel=\"nofollow\" href=\"https:\/\/security-tracker.debian.org\/tracker\/CVE-2019-1125\">CVE-2019-1125<\/a><\/noindex>) a modern CPU-k spekulat\u00edv utas\u00edt\u00e1sv\u00e9grehajt\u00e1si mechanizmus\u00e1ban, amely SWAPGS n\u00e9vre hallgat, a probl\u00e9m\u00e1t kiv\u00e1lt\u00f3 utas\u00edt\u00e1s neve ut\u00e1n. A sebezhet\u0151s\u00e9g <noindex><a rel=\"nofollow\" href=\"https:\/\/access.redhat.com\/articles\/4329821\">MMM-DD-YYYY<\/a><\/noindex> nem privil\u00e9giz\u00e1lt t\u00e1mad\u00f3k sz\u00e1m\u00e1ra lehet\u0151v\u00e9 teszi a kernel vagy a fut\u00f3 virtu\u00e1lis g\u00e9pek mem\u00f3riaz\u00f3n\u00e1inak tartalm\u00e1nak meghat\u00e1roz\u00e1s\u00e1t. A probl\u00e9ma <noindex><a rel=\"nofollow\" href=\"https:\/\/software.intel.com\/security-software-guidance\/insights\/more-information-swapgs-and-speculative-only-segment-loads\">meger\u0151s\u00edtve<\/a><\/noindex> az Intel (x86_64) processzorokban, valamint r\u00e9szben <noindex>\u00e9rinti<\/noindex> az AMD processzorokban, ahol az alapvet\u0151 t\u00e1mad\u00e1si vektor nem ugrik el\u0151. A Spectre \u00e9s Meltdown sebezhet\u0151s\u00e9gek ellen m\u00e1r implement\u00e1lt ellenint\u00e9zked\u00e9sek nem ny\u00fajtanak v\u00e9delmet a SWAPGS t\u00e1mad\u00e1sok ellen Intel processzorok alkalmaz\u00e1sakor, de a Linux, ChromeOS, Android \u00e9s Windows sz\u00e1m\u00e1ra m\u00e1r javasoltak jav\u00edt\u00e1sokat.<\/p>\n<p>A sebezhet\u0151s\u00e9g a Spectre v1 oszt\u00e1lyba tartozik, \u00e9s annak az elk\u00e9pzel\u00e9snek alapj\u00e1n m\u0171k\u00f6dik, hogy adatokat \u00e1ll\u00edtanak helyre a processzor gyors\u00edt\u00f3t\u00e1r\u00e1b\u00f3l, amelyek a spekulat\u00edv utas\u00edt\u00e1sv\u00e9grehajt\u00e1s ut\u00e1n maradnak. A modern CPU-k ugr\u00e1sel\u0151rejelz\u0151 blokkjai a teljes\u00edtm\u00e9ny n\u00f6vel\u00e9se \u00e9rdek\u00e9ben el\u0151re v\u00e9grehajtj\u00e1k bizonyos utas\u00edt\u00e1sokat, amelyek val\u00f3sz\u00edn\u0171leg v\u00e9grehajt\u00e1sra ker\u00fclnek, de nem v\u00e1rj\u00e1k meg az \u00f6sszes v\u00e9grehajt\u00e1st meghat\u00e1roz\u00f3 t\u00e9nyez\u0151 kisz\u00e1m\u00edt\u00e1s\u00e1t (p\u00e9ld\u00e1ul amikor m\u00e9g nem sz\u00e1molt\u00e1k ki az ugr\u00e1s felt\u00e9teleit vagy a hozz\u00e1f\u00e9r\u00e9si param\u00e9tereket). Ha a j\u00f3slat nem igazol\u00f3dik, a processzor elveti a spekulat\u00edv v\u00e9grehajt\u00e1s eredm\u00e9ny\u00e9t, azonban a v\u00e9grehajt\u00e1s sor\u00e1n feldolgozott adatok a processzor gyors\u00edt\u00f3t\u00e1r\u00e1ban maradnak, \u00e9s helyre\u00e1ll\u00edthat\u00f3k a gyors\u00edt\u00f3t\u00e1r tartalm\u00e1nak k\u00f6zvetett csatorn\u00e1kon val\u00f3 meghat\u00e1roz\u00e1s\u00e1t c\u00e9lz\u00f3 m\u00f3dszerekkel, amelyek a gyors\u00edt\u00f3t\u00e1razott \u00e9s a nem gyors\u00edt\u00f3t\u00e1razott adatokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9si id\u0151 v\u00e1ltoz\u00e1s\u00e1t elemzik. <\/p>\n<p>Az \u00faj t\u00e1mad\u00e1s saj\u00e1toss\u00e1ga a sebezhet\u0151s\u00e9g kihaszn\u00e1l\u00e1s\u00e1ban rejlik, amely a spekulat\u00edv utas\u00edt\u00e1sv\u00e9grehajt\u00e1s sor\u00e1n j\u00f6n l\u00e9tre, amikor a SWAPGS utas\u00edt\u00e1st alkalmazz\u00e1k az oper\u00e1ci\u00f3s rendszerekben a GS regiszter \u00e9rt\u00e9k\u00e9nek cser\u00e9jekor a felhaszn\u00e1l\u00f3i t\u00e9rb\u0151l az OS kernelbe (a felhaszn\u00e1l\u00f3i t\u00e9rben haszn\u00e1lt GS \u00e9rt\u00e9ket arra az \u00e9rt\u00e9kre cser\u00e9lik, amelyet a kernel m\u0171veletekn\u00e9l haszn\u00e1lnak). A Linux kernelben a GS t\u00e1rolja a per_cpu mutat\u00f3t, amelyet a kernel adataihoz val\u00f3 hozz\u00e1f\u00e9r\u00e9shez haszn\u00e1lnak, m\u00edg a felhaszn\u00e1l\u00f3i t\u00e9rben a TLS (Thredd Local Storage) mutat\u00f3k tal\u00e1lhat\u00f3k. <\/p>\n<p>A SWAPGS utas\u00edt\u00e1s megdupl\u00e1zott h\u00edv\u00e1s\u00e1nak kiz\u00e1r\u00e1sa \u00e9rdek\u00e9ben, amikor a kernelb\u0151l a kernel ter\u00fclet\u00e9be, vagy ha a regiszter GS helyettes\u00edt\u00e9s\u00e9t nem ig\u00e9nyl\u0151 k\u00f3d v\u00e9grehajt\u00e1sra ker\u00fcl, a parancs v\u00e9grehajt\u00e1sa el\u0151tt ellen\u0151rz\u00e9st \u00e9s felt\u00e9teles ugr\u00e1st v\u00e9geznek. A spekulat\u00edv v\u00e9grehajt\u00e1s mechanizmusa el\u0151re \u00e1tt\u00e9r a SWAPGS utas\u00edt\u00e1ssal rendelkez\u0151 k\u00f3d v\u00e9grehajt\u00e1s\u00e1ra, an\u00e9lk\u00fcl, hogy megv\u00e1rn\u00e1 az ellen\u0151rz\u00e9s eredm\u00e9ny\u00e9t, \u00e9s ha a kiv\u00e1lasztott \u00e1g nem meger\u0151s\u00edtett, elveti az eredm\u00e9nyt. \u00cdgy el\u0151fordulhat, hogy a spekulat\u00edv m\u00f3don kiv\u00e1lasztott \u00e1g nem tartalmazza a SWAPGS v\u00e9grehajt\u00e1s\u00e1nak lehet\u0151s\u00e9g\u00e9t, de a spekulat\u00edv v\u00e9grehajt\u00e1s sor\u00e1n a SWAPGS utas\u00edt\u00e1s m\u00f3dos\u00edtja a GS regiszter \u00e9rt\u00e9k\u00e9t, amelyet a mem\u00f3ri\u00e1val kapcsolatos f\u00fcgg\u0151 m\u0171veletekhez haszn\u00e1lnak, \u00e9s amely a CPU gyors\u00edt\u00f3t\u00e1r\u00e1ban marad. <\/p>\n<p>A kutat\u00f3k k\u00e9t t\u00e1mad\u00e1si forgat\u00f3k\u00f6nyvet javasoltak, amelyekre exploit protot\u00edpusokat k\u00e9sz\u00edtettek. Az els\u0151 forgat\u00f3k\u00f6nyv arra alapoz, hogy a SWAPGS utas\u00edt\u00e1s nem hajt\u00f3dik v\u00e9gre spekulat\u00edvan, b\u00e1r t\u00e9nyleges v\u00e9grehajt\u00e1s sor\u00e1n haszn\u00e1lj\u00e1k, a m\u00e1sodik pedig \u00e9ppen ellenkez\u0151leg, amikor a SWAPGS utas\u00edt\u00e1s spekulat\u00edvan v\u00e9grehajt\u00f3dik, b\u00e1r t\u00e9nylegesen nem kellene. Minden forgat\u00f3k\u00f6nyvhez k\u00e9t exploit\u00e1ci\u00f3s lehet\u0151s\u00e9g \u00e1ll rendelkez\u00e9sre: a t\u00e1mad\u00f3 meghat\u00e1rozhatja egy c\u00edm \u00e9rt\u00e9k\u00e9t a kernelen bel\u00fcl, valamint a t\u00e1mad\u00f3 v\u00e9grehajthat egy keres\u00e9st egy meghat\u00e1rozott \u00e9rt\u00e9k ir\u00e1nt v\u00e9letlenszer\u0171 c\u00edmeken a kernelen bel\u00fcl. A t\u00e1mad\u00e1s v\u00e9grehajt\u00e1sa id\u0151ig\u00e9nyes, \u00e9s az adatlop\u00e1s megszervez\u00e9s\u00e9hez t\u00f6bb \u00f3r\u00e1n kereszt\u00fcl kell v\u00e9grehajtani az exploitot. <\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"S-m7XVBzusU\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/S-m7XVBzusU\/hqdefault.jpg\" alt=\"Vide\u00f3 lej\u00e1tsz\u00e1sa\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p>A Linux kernelben a probl\u00e9ma <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=18ec54fdd6d18d92025af097cd042a75cf0ea24c\">eliminates<\/a><\/noindex> a SWAPGS utas\u00edt\u00e1s h\u00edv\u00e1si logik\u00e1j\u00e1nak megv\u00e1ltoztat\u00e1s\u00e1val (spekulat\u00edv v\u00e9grehajt\u00e1s letilt\u00e1sa), hasonl\u00f3an m\u00e1s Spectre v1 oszt\u00e1ly\u00fa sebezhet\u0151s\u00e9gek jav\u00edt\u00e1s\u00e1hoz. Felt\u00e9telezik, hogy a hozz\u00e1adott v\u00e9delem minim\u00e1lis hat\u00e1ssal lesz a tipikus munkaterhel\u00e9sek teljes\u00edtm\u00e9ny\u00e9re. A k\u00e9sleltet\u00e9s a felhaszn\u00e1l\u00f3i t\u00e9r \u00e9s a kernel k\u00f6z\u00f6tti v\u00e1lt\u00e1s sor\u00e1n jelentkezik, amely a teljes\u00edtm\u00e9ny cs\u00f6kken\u00e9s\u00e9hez vezethet, p\u00e9ld\u00e1ul intenz\u00edv rendszerh\u00edv\u00e1sok v\u00e9grehajt\u00e1sa sor\u00e1n az alkalmaz\u00e1sb\u00f3l, vagy gyakori NMI \u00e9s megszak\u00edt\u00e1sok gener\u00e1l\u00e1sakor. <\/p>\n<p>A jav\u00edt\u00e1shoz a kernelt friss\u00edteni kell mind a f\u0151 rendszeren, mind a vend\u00e9g k\u00f6rnyezetekben, majd a rendszert \u00fajra kell ind\u00edtani. A v\u00e9delem letilt\u00e1s\u00e1hoz Linux alatt a \u201enospectre_v1\u201d opci\u00f3 haszn\u00e1lhat\u00f3, amely a SWAPGS sebezhet\u0151s\u00e9g elleni int\u00e9zked\u00e9seket is letiltja. A jav\u00edt\u00e1s el\u00e9rhet\u0151 form\u00e1j\u00e1ban <noindex><a rel=\"nofollow\" href=\"https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=18ec54fdd6d18d92025af097cd042a75cf0ea24c\">patch form\u00e1j\u00e1ban<\/a><\/noindex> Linux kernelhez, amely m\u00e1r r\u00e9sze a kiad\u00e1soknak <noindex><a rel=\"nofollow\" href=\"https:\/\/cdn.kernel.org\/pub\/linux\/kernel\/v4.x\/ChangeLog-4.19.65\">4.19.65<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/cdn.kernel.org\/pub\/linux\/kernel\/v5.x\/ChangeLog-5.2.7\">5.2.7<\/a><\/noindex>, 4.14.137, 4.9.188 \u00e9s 4.4.188. A Linux disztrib\u00faci\u00f3k friss\u00edt\u00e9sei m\u00e9g nem jelentek meg (<noindex><a rel=\"nofollow\" href=\"https:\/\/security-tracker.debian.org\/tracker\/CVE-2019-1125\">Debian<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=CVE-2019-1125\">RHEL<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.redhat.com\/show_bug.cgi?id=1738285\">Fedora<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/security.archlinux.org\/CVE-2019-1125\">Arch Linux<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.novell.com\/show_bug.cgi?id=CVE-2019-1125\">SUSE\/openSUSE<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/people.canonical.com\/~ubuntu-security\/cve\/2019\/CVE-2019-1125.html\">Ubuntu<\/a><\/noindex>). Windows alatt a probl\u00e9m\u00e1t csendben orvosolt\u00e1k a <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1125\">j\u00faliusi friss\u00edt\u00e9sben<\/a><\/noindex>. A Google <noindex><a rel=\"nofollow\" href=\"https:\/\/chromium-review.googlesource.com\/c\/chromiumos\/third_party\/kernel\/+\/1739575\">k\u00e9sz\u00edtette<\/a><\/noindex> jav\u00edt\u00e1st biztos\u00edtott a 4.19-es kernelhez, amely a ChromeOS-ban \u00e9rhet\u0151 el, \u00e9s <noindex><a rel=\"nofollow\" href=\"https:\/\/android-review.googlesource.com\/c\/kernel\/common\/+\/1097435\">Android<\/a><\/noindex>.<\/p>\n<p>a Bitdefender kutat\u00f3i szerint az Intel m\u00e1r tavaly augusztusban \u00e9rtes\u00fclt a probl\u00e9m\u00e1r\u00f3l. A probl\u00e9m\u00e1t programoz\u00e1ssal k\u00edv\u00e1nt\u00e1k orvosolni, ez\u00e9rt a jav\u00edt\u00e1s koordin\u00e1l\u00e1s\u00e1ban r\u00e9szt vettek a Microsoft, a Google \u00e9s a Linux kernel fejleszt\u0151i. Az Intel r\u00e9gebbi processzorai, az Ivy Bridge el\u0151tt, jelent\u0151sen nehezebben t\u00e1madhat\u00f3k a WRGSBASE utas\u00edt\u00e1s t\u00e1mogat\u00e1s\u00e1nak hi\u00e1nya miatt, amelyet a kihaszn\u00e1l\u00e1s sor\u00e1n alkalmaztak. Az ARM, POWER, SPARC, MIPS \u00e9s RISC-V rendszerek nem \u00e9rintettek, mivel nem t\u00e1mogatj\u00e1k a SWAPGS utas\u00edt\u00e1st.<\/p>\n<p>A probl\u00e9ma f\u0151k\u00e9nt az Intel processzorral rendelkez\u0151 felhaszn\u00e1l\u00f3kat fenyegeti -<br \/>\n AMD rendszereken csak a t\u00e1mad\u00e1s m\u00e1sodik forgat\u00f3k\u00f6nyv\u00e9nek reproduk\u00e1l\u00e1sa volt lehets\u00e9ges, amely a GS regiszter alap\u00e9rt\u00e9k\u00e9nek spekulat\u00edv feldolgoz\u00e1s\u00e1ra korl\u00e1toz\u00f3dik, \u00e9s bizonyos \u00e9rt\u00e9kek keres\u00e9s\u00e9re haszn\u00e1lhat\u00f3 v\u00e9letlenszer\u0171 mem\u00f3ria ter\u00fcleteken. E t\u00e1mad\u00e1si m\u00f3d megakad\u00e1lyoz\u00e1s\u00e1hoz <noindex>el\u00e9g sok<\/noindex> a Spectre v1 sebezhet\u0151s\u00e9gek ellen alkalmazhat\u00f3 v\u00e9delmi m\u00f3dszereket kell haszn\u00e1lni. <\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Forr\u00e1s: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51234\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-1125) \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 CPU, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u043c\u044f SWAPGS, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043d\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel (x86_64) \u0438 \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b AMD, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36892","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47SWAPGS \u2014 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f CPU | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:14:35+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:14:35+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47SWAPGS \u2014 \u00faj sebezhet\u0151s\u00e9g a CPU spekulat\u00edv v\u00e9grehajt\u00e1si mechanizmus\u00e1ban | ProHoster","description":"A Bitdefender kutat\u00f3i \u00faj sebezhet\u0151s\u00e9get azonos\u00edtottak (","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47SWAPGS \u2014 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f CPU | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:14:35+00:00","article:modified_time":"2019-10-31T19:14:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36892","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 05:14:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:37:22","updated":"2026-01-22 05:14:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/36892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=36892"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/36892\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=36892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=36892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=36892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}