Mofuputsi oa ts'ireletso ea Google, Tavis Ormandy, o khethile ts'oaetso e ncha (CVE-2023-23583) ho li-processor tsa Intel, codenamed Reptar, eo haholo-holo e behang tšokelo ho litsamaiso tsa maru tse tsamaisang mechini e sebetsang ea basebelisi ba fapaneng. Ho ba kotsing ho ka etsa hore sistimi e fanyehe kapa e senyehe ha e etsa ts'ebetso e itseng ho sistimi e sa sebetseng ea baeti. Sesebediswa se thehang maemo a tshebediso se phatlaladitswe bakeng sa diteko.
Ha ho nahanoa, bofokoli bo ka sebelisoa hampe ho nyolla litokelo ho tloha ho ring 3 ho isa ho 0 (CPL0) le ho phonyoha libaka tse ka thoko, empa boemo bona ha bo so netefatsoe ka ts'ebetso ka lebaka la mathata a ho lokisa liphoso maemong a manyane a meralo. Teko ea ka hare ho Intel e boetse e bonts'itse monyetla oa ho sebelisa monyetla oa ho ba kotsing ea ho eketseha ha litokelo tlas'a maemo a itseng.
Ho ea ka mofuputsi, ho ba kotsing ho ama Ice Lake, Rocket Lake, Tiger Lake, Raptor Lake, Alder Lake, le Sapphire Rapids malapa a li-processor tsa Intel. Tlaleho ea Intel e hlokomela hore taba ena e ama li-processor tsa Intel Core tsa moloko oa 10 (Ice Lake) le li-processor tsa Xeon Scalable tsa moloko oa boraro, hammoho le li-processor tsa Xeon E/D/W (Ice Lake, Skylake, Haswell, Broadwell, Skylake, Sapphire Rapids, Emerald Rapids, Cascade Lake, Letša la Cascade, Letša la Letša la Letša la Letša), Letša la Letša la Cascade, Letša la Letša la Letša la Letša la Leqhoa le Letšeng la Letša la Letša la Letša la Letša la Letša la Letša la Letša la Cascade. (Apollo Lake, Jasper Lake, Arizona Beach, Alder Lake, Parker Ridge, Snow Ridge, Elkhart Lake, le Denverton). Ho ba kotsing ho ile ha lokisoa ntlafatsong ea maobane ea microcode 20231114.
Bofokoli bo bakoa ke boemo bo itseng ba meralo e nyane moo ho phethahatsa taelo ea "REP MOVSB" ho kentsoeng ka sehlomathiso sa "REX", se lebisang boitšoarong bo sa hlalosoang. Taba ena e ile ea sibolloa nakong ea tlhahlobo ea li-prefixes tse sa hlokahaleng, tseo ho nahanoang hore li lokela ho hlokomolohuoa empa ka ts'ebetso li lebisitse litlamorao tse makatsang, joalo ka ho iphapanyetsa ho tlola ho sa hlokahaleng le ho sitisa ho boloka pointer ho xsave le litaelo tsa mohala. Tshekatsheko e nngwe e senotse hore ho kenya sehlongwapele se sa hlokahaleng ho ditaelo tsa "REP MOVSB" ho senya dikahare tsa ROB (ReOrder Buffer), e sebediswang bakeng sa ho odara ditaelo.
Phoso ho lumeloa hore e bakoa ke palo e fosahetseng ea boholo ba litaelo tsa MOVSB, e leng se lebisang tšitiso ea aterese ea litaelo tse ngoliloeng ho ROB buffer ka mor'a MOVSB ka sehlomathiso se feteletseng, le ho se tsamaisane hantle ha sesupa sa litaelo. Ho se lumellane hona ho ka fella feela ho sitisang lipalo tsa mahareng le ho khutlisetsa boemo bo ts'oanang. Leha ho le joalo, haeba ho oa ho ka etsahala ka nako e le 'ngoe ho li-cores tse ngata kapa likhoele tsa SMT, ho ka baka bobolu bo lekaneng ba meralo e nyane ho baka ho oa.
Source: opennet.ru
