{"id":36892,"date":"2019-10-31T22:14:35","date_gmt":"2019-10-31T19:14:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu\/"},"modified":"2019-10-31T22:14:35","modified_gmt":"2019-10-31T19:14:35","slug":"swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu","title":{"rendered":"SWAPGS \u2014 nj\u00eb dob\u00ebsi e re n\u00eb mekanizmin e ekzekutimit spekulativ t\u00eb CPU","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u00ebrkuesit nga kompania Bitdefender identifikuan<\/a><\/noindex> m\u00ebnyr\u00ebn e re t\u00eb cenueshm\u00ebris\u00eb (CVE-2019-1125<\/a><\/noindex>) n\u00eb mekanizmin e ekzekutimit spekulativ t\u00eb instrukcioneve t\u00eb CPU-ve moderne, i cili mori emrin SWAPGS, sipas emrit t\u00eb instrukcionit t\u00eb procesorit q\u00eb shkakton problemin. \u00c7\u00ebshtja e cenueshm\u00ebris\u00eb lejon<\/a><\/noindex> i lejon nj\u00eb sulmuesi pa privilegje t\u00eb p\u00ebrcaktoj\u00eb p\u00ebrmbajtjen e zonave t\u00eb memories s\u00eb b\u00ebrtham\u00ebs ose t\u00eb makinerive virtuale n\u00eb pun\u00eb. Problemi \u00ebsht\u00eb konfirmuar<\/a><\/noindex> n\u00eb procesor\u00ebt Intel (x86_64) dhe pjes\u00ebrisht dhe<\/noindex> procesor\u00ebt AMD, p\u00ebr t\u00eb cilat nuk shp\u00ebrthehet vektori kryesor i sulmit. Metodat e zbatuara m\u00eb par\u00eb p\u00ebr t\u00eb kund\u00ebrshtuar cenueshm\u00ebrit\u00eb Spectre dhe Meltdown nuk mbrojn\u00eb nga sulmi SWAPGS kur p\u00ebrdoren procesor\u00ebt Intel, por p\u00ebr Linux, ChromeOS, Android dhe Windows tashm\u00eb jan\u00eb propozuar rregullime.<\/p>\n

Vulnerabiliteti i p\u00ebrket klas\u00ebs Spectre v1 dhe bazohet n\u00eb iden\u00eb e rikuperimit t\u00eb t\u00eb dh\u00ebnave nga cache-i i procesorit, q\u00eb mbeten pas ekzekutimit spekulativ t\u00eb instrukcioneve. Blloket e parashikimit t\u00eb kalimeve t\u00eb CPU-ve moderne p\u00ebr t\u00eb rritur performanc\u00ebn aplikojn\u00eb ekzekutimin parashikues t\u00eb disa instrukcioneve, t\u00eb cilat shum\u00eb mund\u00ebsi do t\u00eb ekzekutohen, por pa pritur p\u00ebr llogaritjen e t\u00eb gjith\u00eb faktor\u00ebve q\u00eb p\u00ebrcaktojn\u00eb ekzekutimin e tyre (p.sh., kur kushtet e kalimit ose parametrat e aksesit ende nuk jan\u00eb llogaritur). N\u00ebse parashikimi nuk konfirmohet, procesori hedh rezultatin e ekzekutimit spekulativ, por t\u00eb dh\u00ebnat e procesuara gjat\u00eb k\u00ebsaj kohe mbeten n\u00eb cache-in e procesorit dhe mund t\u00eb rikuperohen p\u00ebrmes metodave t\u00eb p\u00ebrcaktimit t\u00eb p\u00ebrmbajtjes s\u00eb caches p\u00ebrmes kanaleve an\u00ebsore q\u00eb analizojn\u00eb ndryshimin e koh\u00ebs s\u00eb aksesit n\u00eb t\u00eb dh\u00ebna t\u00eb cache-uar dhe t\u00eb pa-cache-uar. <\/p>\n

Karakteristika e sulmit t\u00eb ri \u00ebsht\u00eb p\u00ebrdorimi i shkarkimit q\u00eb ndodh gjat\u00eb ekzekutimit spekulativ t\u00eb udh\u00ebzimit SWAPGS, i cili p\u00ebrdoret n\u00eb sistemet operative p\u00ebr t\u00eb z\u00ebvend\u00ebsuar vler\u00ebn e regjistrit GS gjat\u00eb kalimit t\u00eb kontrollit nga hap\u00ebsira e p\u00ebrdoruesit n\u00eb b\u00ebrtham\u00ebn e OS (vlera e GS q\u00eb p\u00ebrdoret n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit z\u00ebvend\u00ebsohet me vler\u00ebn q\u00eb p\u00ebrdoret gjat\u00eb operacioneve n\u00eb b\u00ebrthm\u00eb). N\u00eb b\u00ebrtham\u00ebn Linux, n\u00eb GS ruhet nj\u00eb tregues per_cpu, i cili p\u00ebrdoret p\u00ebr t\u00eb aksesuar t\u00eb dh\u00ebnat e b\u00ebrthm\u00ebs, nd\u00ebrsa n\u00eb hap\u00ebsir\u00ebn e p\u00ebrdoruesit treguesit jan\u00eb p\u00ebr TLS (Storage Lokale p\u00ebr Thread). <\/p>\n

P\u00ebr t\u00eb p\u00ebrjashtuar thirrjen e dyfisht\u00eb t\u00eb instruksionit SWAPGS kur b\u00ebhet nj\u00eb k\u00ebrkes\u00eb e p\u00ebrs\u00ebritur n\u00eb b\u00ebrtham\u00eb nga hap\u00ebsira e b\u00ebrtham\u00ebs ose kur ekzekutohet kodi q\u00eb nuk k\u00ebrkon nd\u00ebrrimin e regjistrit GS, b\u00ebhet nj\u00eb kontroll dhe kalim kushtor para instruksionit. Mekanizmi i ekzekutimit spekullativ kalon paraprakisht n\u00eb ekzekutimin e kodit me instruksionin SWAPGS, pa pritur rezultatin e kontrollit, dhe n\u00ebse dega e zgjedhur nuk konfirmohet, hidhni rezultatin. N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, mund t\u00eb ndodh\u00eb nj\u00eb situat\u00eb ku spekullativisht zgjidhet nj\u00eb deg\u00eb q\u00eb nuk parashikon ekzekutimin e SWAPGS, por gjat\u00eb procesit t\u00eb ekzekutimit spekullativ vlera e regjistrit GS do t\u00eb ndryshohet nga instruksioni SWAPGS dhe do t\u00eb p\u00ebrdoret n\u00eb operacione t\u00eb varura me memorien, t\u00eb cilat vendosen n\u00eb caches e CPU. <\/p>\n

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0434\u0432\u0430 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f \u0430\u0442\u0430\u043a\u0438, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432. \u041f\u0435\u0440\u0432\u044b\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u043e\u0441\u043d\u043e\u0432\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f SWAPGS \u043d\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e, \u0445\u043e\u0442\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438, \u0430 \u0432\u0442\u043e\u0440\u043e\u0439 — \u043d\u0430\u043e\u0431\u043e\u0440\u043e\u0442, \u043a\u043e\u0433\u0434\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f SWAPGS \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e, \u0445\u043e\u0442\u044f \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u0430. \u0414\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043e \u0434\u0432\u0430 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438: \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0434\u0440\u0435\u0441\u0443 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u044f\u0434\u0440\u0430 \u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u043e\u0438\u0441\u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432 \u043f\u043e \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u043c \u0430\u0434\u0440\u0435\u0441\u0430\u043c \u0432 \u044f\u0434\u0440\u0435. \u041f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442 \u043c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0447\u0430\u0441\u043e\u0432. <\/p>\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

N\u00eb b\u00ebrtham\u00ebn Linux ka nj\u00eb problem i eliminuar<\/a><\/noindex> p\u00ebrmes ndryshimit t\u00eb logjik\u00ebs s\u00eb thirrjes s\u00eb udh\u00ebzimit SWAPGS (bllokimi i ekzekutimit spekulativ), ngjash\u00ebm me rregullimin e t\u00eb tjera dob\u00ebsive t\u00eb klas\u00ebs Spectre v1. Supozohet se mbrojtja e shtuar do t\u00eb ndikoj\u00eb minimalisht n\u00eb performanc\u00ebn e ngarkesave tipike t\u00eb pun\u00ebs. Vonesa ndodh n\u00eb faz\u00ebn e kalimit midis hap\u00ebsir\u00ebs s\u00eb p\u00ebrdoruesit dhe kernelit, e cila mund t\u00eb \u00e7oj\u00eb n\u00eb uljen e performanc\u00ebs, p\u00ebr shembull, gjat\u00eb ekzekutimit intens t\u00eb thirrjeve sistemike nga aplikacioni ose gjenerimit t\u00eb shpesht\u00eb t\u00eb NMI-ve dhe nd\u00ebrprerjeve. <\/p>\n

\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u044f\u0434\u0440\u0430 \u043a\u0430\u043a \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0442\u0430\u043a \u0438 \u0432 \u0433\u043e\u0441\u0442\u0435\u0432\u044b\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445, \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0414\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0432 Linux \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043e\u043f\u0446\u0438\u044f «nospectre_v1», \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SWAPGS. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0432 \u0432\u0438\u0434\u0435 patch<\/a><\/noindex> p\u00ebr kernelin Linux, i cili tashm\u00eb \u00ebsht\u00eb i p\u00ebrfshir\u00eb n\u00eb versionet 4.19.65<\/a><\/noindex>, 5.2.7<\/a><\/noindex>, 4.14.137, 4.9.188 dhe 4.4.188. P\u00ebrdit\u00ebsimet p\u00ebr distributions Linux ende nuk jan\u00eb l\u00ebshuar (Debian<\/a><\/noindex>, RHEL<\/a><\/noindex>, Fedora<\/a><\/noindex>, Arch Linux<\/a><\/noindex>, SUSE\/openSUSE<\/a><\/noindex>, Ubuntu<\/a><\/noindex>). N\u00eb Windows problemi u rregullua pa buj\u00eb n\u00eb p\u00ebrdit\u00ebsimin e korrikut<\/a><\/noindex>. Kompania Google p\u00ebrgatitur<\/a><\/noindex> rregullimi p\u00ebr kernelin 4.19, i ofruar n\u00eb ChromeOS dhe Android<\/a><\/noindex>.<\/p>\n

Sipas k\u00ebrkuesve nga kompania Bitdefender, Intel ishte informuar p\u00ebr problemin q\u00eb n\u00eb gusht t\u00eb vitit t\u00eb kaluar. Problemi u zgjidh p\u00ebrmes nj\u00eb patch-i, p\u00ebr t\u00eb cilin ishin angazhuar zhvillues nga Microsoft, Google dhe b\u00ebrtham\u00ebn Linux. Procesor\u00ebt e vjet\u00ebr Intel, deri n\u00eb Ivy Bridge, jan\u00eb shum\u00eb m\u00eb t\u00eb v\u00ebshtir\u00eb p\u00ebr t\u00eb sulmuar p\u00ebr shkak t\u00eb munges\u00ebs s\u00eb mb\u00ebshtetjes p\u00ebr instrukcionin WRGSBASE, t\u00eb p\u00ebrdorur n\u00eb exploit. Sistemet ARM, POWER, SPARC, MIPS dhe RISC-V nuk jan\u00eb t\u00eb prekur nga problemi, pasi nuk mb\u00ebshtesin instrukcionin SWAPGS.<\/p>\n

\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043e\u0431\u043b\u0430\u0434\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel —
\n n\u00eb sistemet AMD ka arritur t\u00eb riprodhohet vet\u00ebm skenari i dyt\u00eb i sulmit, i kufizuar n\u00eb p\u00ebrpunimin spekulativ t\u00eb vler\u00ebs baz\u00eb t\u00eb regjistrit GS, i cili mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb k\u00ebrkuar vlera t\u00eb caktuara n\u00eb zona t\u00eb rast\u00ebsishme t\u00eb memories. P\u00ebr t\u00eb bllokuar k\u00ebt\u00eb variant sulmi mjaftuesh\u00ebm<\/noindex> metodat ekzistuese t\u00eb mbrojtjes nga dob\u00ebsit\u00eb Spectre v1. <\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-1125) \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 CPU, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u043c\u044f SWAPGS, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043d\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel (x86_64) \u0438 \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b AMD, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36892","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47SWAPGS \u2014 vulnerabilitet i ri n\u00eb mekanizmin e ekzekutimit spekulativ t\u00eb CPU | ProHoster","description":"K\u00ebrkuesit nga kompania Bitdefender kan\u00eb zbuluar nj\u00eb vulnerabilitet t\u00eb ri (CVE-2019-1125) n\u00eb mekanizmin e ekzekutimit spekulativ t\u00eb instruksioneve n\u00eb CPU-t\u00eb moderne, i cili ka marr\u00eb emrin SWAPGS, n\u00eb p\u00ebrputhje me emrin e instrukcionit t\u00eb procesorit q\u00eb shkakton problemin. Vulnerabiliteti lejon nj\u00eb sulmues t\u00eb pa privilegjuar t\u00eb p\u00ebrcaktoj\u00eb p\u00ebrmbajtjen e zonave t\u00eb memories s\u00eb kernelit ose makinave virtuale t\u00eb ekzekutuara. Problemi \u00ebsht\u00eb konfirmuar n\u00eb procesor\u00ebt Intel (x86_64) dhe preku pjes\u00ebrisht procesor\u00ebt AMD, p\u00ebr t\u00eb cil\u00ebt nuk shfaqet vektori kryesor.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47SWAPGS \u2014 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f CPU | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Bitdefender \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-1125) \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 CPU, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u043c\u044f SWAPGS, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043d\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043e\u0431\u043b\u0430\u0441\u0442\u0435\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel (x86_64) \u0438 \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b AMD, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u043a\u0442\u043e\u0440","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/swapgs-novaya-uyazvimost-v-mehanizme-spekulyativnogo-vypolneniya-cpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:14:35+00:00","article:modified_time":"2019-10-31T19:14:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36892","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 05:14:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:37:22","updated":"2026-01-22 05:14:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/36892","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=36892"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/36892\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=36892"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=36892"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=36892"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}