Iyo Intel Spoiler vulnerability yakagamuchira chinzvimbo chepamutemo, asi hapana chigamba uye hapazove nechimwe

Rimwe zuva, Intel yakapa chiziviso nezve kupihwa kweiyo official Spoiler vulnerability identifier. Kusagadzikana kweSpoiler kwakazozivikanwa mwedzi wapfuura mushure memushumo wakaitwa nenyanzvi kubva kuWorcester Polytechnic Institute muMassachusetts uye University of Lübeck (Germany). Kana iri chero nyaradzo, Spoiler ichanyorwa mumadhatabhesi ekusagadzikana seCVE-2019-0162. Kune vane pessimists, tinokuzivisa iwe: Intel haisi kuzosunungura zvigamba kuderedza njodzi yekurwiswa uchishandisa CVE-2019-0162. Sekureva kwekambani, nzira dzakajairwa dzekurwisa kudivi-chiteshi kurwiswa dzinogona kudzivirira kubva kuSpoiler.

Ziva kuti Spoiler vulnerability (CVE-2019-0162) pachayo haibvumire kuwana data rinonzwa nemushandisi pasina ruzivo rwemushandisi. Ichi chingori chishandiso chekusimbisa uye kuita kubira uchishandisa iyo yaizivikanwa kwenguva refu yeRowhammer vulnerability. Kurwiswa uku imhando yekurwiswa kwepadivi chiteshi uye inoitwa ichipokana neDDR3 ndangariro neECC (Error Correction Code) cheki. Zvinogoneka zvakare kuti DDR4 ndangariro neECC zvakare inotapukirwa nekusagadzikana kweRowhammer, asi izvi hazvisati zvasimbiswa kuyedza. Chero zvazvingaitika, kunze kwekunge tapotsa chimwe chinhu, pakanga pasina mameseji nezveizvi.

Uchishandisa Spoiler, unogona kubatanidza kero chaiyo nemakero emuviri mundangariro. Mune mamwe mazwi, nzwisisa kuti ndeapi masero ekurangarira anoda kurwiswa uchishandisa Rowhammer kuitira kutsiva data mundangariro yemuviri. Kuchinja mabhiti matatu chete e data mundangariro panguva imwe kunodarika ECC uye kunopa anorwisa rusununguko rwekuita. Kuti uwane kero yemepu, unofanirwa kuve neasina-yakasarudzika mushandisi mukana wekupinda pakombuta. Mamiriro ezvinhu aya anoderedza njodzi yeSpoiler, asi haabvise. Maererano nenyanzvi, njodzi yeSpoiler ndeye 3,8 points kunze kwe10 inogoneka.

Vese Intel Core processors kusvika kuchizvarwa chekutanga vanotapukirwa neSpoiler vulnerabilities. Kuchinja iyo microcode kuti ivhare kwaizotungamira kudzikira kwakanyanya mukuita processor. "Mushure mekunyatsoongorora, Intel yakaona kuti iripo dziviriro yekernel senge KPTI [Kernel Memory Isolation] inoderedza njodzi yekudonha kwedata kuburikidza neakakomborerwa mazinga. "Intel inokurudzira kuti vashandisi vatevedze maitiro akajairwa kuderedza kushandiswa kweidzi [side-channel kurwisa] kusagadzikana."

Source: 3dnews.ru