Kotsi (CVE-6.2-2023) e khethiloe ho Linux kernel 1998, e thibelang tšireletso khahlanong le litlhaselo tsa Specter v2, tse lumellang ho fihlella mohopolong oa mekhoa e meng e sebetsang ka likhoele tse fapaneng tsa SMT kapa Hyper Threading, empa ho processor e tšoanang ea 'mele. mantlha. Ho ba kotsing, har'a lintho tse ling, ho ka sebelisoa ho baka ho lutla ha data lipakeng tsa mechini e fumanehang litsing tsa maru. Bothata bo ama feela Linux 6.2 kernel mme bo bakoa ke ts'ebetsong e fosahetseng ea lintlafatso tse etselitsoeng ho fokotsa bohlokoa ba ho sebelisa ts'ireletso ea Specter v2. Kotsi e ile ea lokisoa lekaleng la liteko la Linux 6.3 kernel.
Sebakeng sa mosebelisi, ho itšireletsa khahlanong le litlhaselo tsa Specter, lits'ebetso li ka thibela ka mokhoa o ikhethileng ts'ebetso e inahaneloang ea litaelo li sebelisa prctl PR_SET_SPECULATION_CTRL kapa tsa sebelisa sefa mohala oa sistimi ho latela mochini oa seccomp. Ho ea ka bafuputsi ba hlokometseng bothata, ts'ebetso e fosahetseng ea kernel 6.2 e siile mechine e fumanehang ea bonyane mofani oa leru a le mong ntle le tšireletso e nepahetseng, ho sa tsotellehe ho kenyelletsoa ha mokhoa oa ho thibela tlhaselo ea spectre-BTI ka prctl. Ho ba kotsing ho boetse ho hlaha ho li-server tse tloaelehileng tse nang le kernel 6.2, ha u li kenya "spectre_v2=ibrs" ho sebelisoa.
Moko oa ho ba kotsing ke hore ha u khetha mekhoa ea ts'ireletso ea IBRS kapa eIBRS, lintlafatso tse hlahisitsoeng li ile tsa sitisa ts'ebeliso ea mochini oa STIBP (Single Thread Indirect Branch Predictors), o hlokahalang ho thibela ho lutla ha o sebelisa theknoloji ea ho bala ka nako e le 'ngoe (SMT kapa Hyper- Khoele). Leha ho le joalo, ke mokhoa oa eIBRS feela o fanang ka tšireletso khahlanong le ho lutla pakeng tsa likhoele, empa eseng mokhoa oa IBRS, kaha tabeng ena bit ea IBRS, e fanang ka tšireletso khahlanong le ho lutla pakeng tsa li-cores tse utloahalang, e hlakotsoe ka mabaka a ts'ebetso ha taolo e khutlela sebakeng sa mosebedisi, likhoele sebakeng sa mosebelisi tse sa sirelelitsoeng tlhaselong ea Specter v2.
Source: opennet.ru