Kusagadzikana kwaonekwa muLinux 6.2 kernel (CVE-2023-1998) inodzima dziviriro kubva kuSpecter v2 kurwiswa kunobvumira kupinda mundangariro yemamwe maitiro anomhanya pane akasiyana SMT kana Hyper Threading tambo, asi pane imwecheteyo yemuviri processor core. Kusagadzikana, pakati pezvimwe zvinhu, kunogona kushandiswa kuronga kudonha kwedata pakati pemakina chaiwo mumafu system. Iyo nyaya inobata chete iyo Linux 6.2 kernel uye inokonzereswa nekuita zvisirizvo kwe optimizations yakagadzirirwa kudzikisa kukosha kwepamusoro paunenge uchishandisa dziviriro kubva kuSpecter v2. Kusagadzikana kwakagadziriswa mubazi rekuyedza reLinux 6.3 kernel.
Munzvimbo yemushandisi, kudzivirira kubva kuSpecter kurwiswa, maitiro anogona kudzima zvekufungidzira kuraira kuuraya ne prctl PR_SET_SPECULATION_CTRL kana kushandisa seccomp-based system yekufona kusefa. Sekureva kwevatsvaguri vakaona dambudziko iri, optimization isiriyo mu6.2 kernel yakasiya machina einenge hombe yegore mupi pasina dziviriro yakakodzera, kunyangwe kusanganisirwa kweiyo spectre-BTI yekurwisa kuvharira maitiro kuburikidza ne prctl. Kusagadzikana kunozviratidzawo pamaseva akajairwa ane 6.2 kernel, ayo akabhowa achishandisa "spectre_v2=ibrs" kuseta.
Chakakosha chekusagadzikana ndechekuti kana uchisarudza IBRS kana eIBRS nzira dzekudzivirira, magadzirirwo akaitwa akaremara kushandiswa kweSTIBP (Single Thread Indirect Branch Predictors) mashandiro, ayo anodiwa kuvharira kuvuza kana uchishandisa panguva imwe chete multithreading tekinoroji (SMT kana Hyper-Threading). ) Panguva imwecheteyo, iyo chete eIBRS modhi inopa dziviriro kubva pakudonha pakati petambo, asi kwete iyo IBRS modhi, sezvo nayo iyo IBRS bit, iyo inopa dziviriro kubva pakudonha pakati pezvine musoro cores, inocheneswa nekuda kwezvikonzero zvekushanda kana kutonga kuchidzokera kunzvimbo yemushandisi, izvo zvinoita kuti tambo dzemushandisi nzvimbo dzirege kuchengetedzwa kubva pakurwiswa kweSpecter v2 kirasi.
Source: opennet.ru