ื ื ื™ื™ึทืข ืงืœืึทืก ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื™ื ื˜ืขืœ ืคึผืจืึทืกืขืกืขืจื– ืื™ื– ื‘ืึทืงืขื ืขื 

ื™ื ื˜ืขืœ ืืจื•ื™ืก ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ื ื™ื™ึท ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืงืœืึทืก ืื™ืŸ ื–ื™ื™ืขืจ ืคึผืจืึทืกืขืกืขืจื– - MDS (ืžื™ื™ืงืจืึธื•ืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืึทืœ ื“ืึทื˜ืึท ืกืึทืžืคึผืœื™ื ื’). ื•ื•ื™ ืคืจื™ืขืจ ืกืคึผืขืงื˜ืขืจ ืื ืคืืœืŸ, ื ื™ื™ึทืข ืคึผืจืึธื‘ืœืขืžืก ืงืขื ืขืŸ ืคื™ืจืŸ ืฆื• ืœื™ืงืึทื“ื–ืฉ ืคื•ืŸ ืคึผืจื™ื•ื•ืึทื˜ ื“ืึทื˜ืŸ ืคึฟื•ืŸ ื“ื™ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขื, ื•ื•ื™ืจื˜ื•ืึทืœ ืžืืฉื™ื ืขืŸ ืื•ืŸ ืื ื“ืขืจืข ืคึผืจืึทืกืขืกืึทื–. ืขืก ืื™ื– ืึทืœืขื“ื–ืฉื“ ืึทื– ื“ื™ ืคืจืื‘ืœืขืžืขืŸ ื–ืขื ืขืŸ ืขืจืฉื˜ืขืจ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื“ื•ืจืš ื™ื ื˜ืขืœ ืขืžืคึผืœื•ื™ื™ื– ืื•ืŸ ืคึผืึทืจื˜ื ืขืจืก ื‘ืขืฉืึทืก ืึทืŸ ืื™ื ืขืจืœืขื›ืขืจ ืงืึธื ื˜ืจืึธืœื™ืจืŸ, ื ืึธืš ื•ื•ืึธืก ืคืจื™ื™ึท ืจื™ืกืขืจื˜ืฉืขืจื– ื”ืึธื‘ืŸ ืฆื•ื’ืขืฉื˜ืขืœื˜ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ืขื ืœืขืš ืคึผืจืึธื‘ืœืขืžืก ืฆื• ื™ื ื˜ืขืœ. AMD ืื•ืŸ ARM ืคึผืจืึทืกืขืกืขืจื– ื–ืขื ืขืŸ ื ื™ืฉื˜ ืึทืคืขืงื˜ืึทื“ ื“ื•ืจืš ื“ืขื ืคึผืจืึธื‘ืœืขื.

ื‘ืึทื–ื™ืจื˜ ืื•ื™ืฃ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืคึผืจืึธื‘ืœืขืžืก ื“ื•ืจืš ืจื™ืกืขืจื˜ืฉืขืจื– ืคื•ืŸ ื“ื™ ื˜ืขื›ื ื™ืฉืข ืื•ื ื™ื•ื•ืขืจืกื™ื˜ืขื˜ ืคื•ืŸ ื’ืจืึทื– (ืขืกื˜ืจื™ื™ึทืš) ื“ืขื•ื•ืขืœืึธืคึผืขื“ ืขื˜ืœืขื›ืข ืคึผืจืึทืงื˜ื™ืฉ ื–ื™ื™ึทื˜ ืงืึทื ืึทืœ ืื ืคืืœืŸ:

  • ื–ืึธืžื‘ื™ืขืœืึธืึทื“ (ืคึผื“ืฃ) - ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืขืงืกื˜ืจืึทืงื˜ ืงืึทื ืคืึทื“ืขื ื˜ืฉืึทืœ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ืื ื“ืขืจืข ืคึผืจืึทืกืขืกืึทื–, ื“ื™ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขื, ื•ื•ื™ืจื˜ื•ืึทืœ ืžืืฉื™ื ืขืŸ ืื•ืŸ ืคึผืจืึธื˜ืขืงื˜ืขื“ ืขื ืงืœืึทื•ื•ื– (ื˜ื™, ื˜ืจืึทืกื˜ื™ื“ ืขืงืกืขืงื•ื˜ื™ืึธืŸ ืกื•ื•ื™ื•ื•ืข). ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ื™ ื’ืขืฉื™ื›ื˜ืข ืคื•ืŸ โ€‹โ€‹ืขืคืŸ ื‘ืœืขื˜ืขืจ ืื™ืŸ ื“ื™ Tor ื‘ืœืขื˜ืขืจืขืจ ืคืœื™ืกื ื“ื™ืง ืื™ืŸ ืืŸ ืื ื“ืขืจ ื•ื•ื™ืจื˜ื•ืึทืœ ืžืึทืฉื™ืŸ ืื™ื– ื“ืขืžืึทื ืกื˜ืจื™ื™ื˜ื™ื“, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื“ื™ื˜ืขืจืžืึทื ื™ื ื’ ื“ื™ ืึทืงืกืขืก ืฉืœื™ืกืœืขืŸ ืื•ืŸ ืคึผืึทืกื•ื•ืขืจื“ื– ื’ืขื ื™ืฆื˜ ืื™ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–;


  • RIDL (ืคึผื“ืฃ) - ืึทืœืึทื•ื– ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืœื™ืงืึทื“ื–ืฉ ืฆื•ื•ื™ืฉืŸ ืคืึทืจืฉื™ื“ืŸ ืืคื’ืขื–ื•ื ื“ืขืจื˜ ื’ืขื‘ื™ื˜ืŸ ืื™ืŸ ื™ื ื˜ืขืœ ืคึผืจืึทืกืขืกืขืจื–, ืึทื–ืึท ื•ื•ื™ ืคึผืœืึธืžื‘ื™ืจืŸ ื‘ืึทืคืขืจื–, ืกื˜ืึธืจื™ื“ื–ืฉ ื‘ืึทืคืขืจื– ืื•ืŸ ืžืึทืกืข ืคึผืึธืจืฅ. ื‘ื™ื™ืฉืคื™ืœืŸ ืคื•ืŸ ืื ืคืืœืŸ ื–ืขื ืขืŸ ื’ืขื•ื•ื™ื–ืŸ ืฆื• ืึธืจื’ืึทื ื™ื–ื™ืจืŸ ืœื™ืงืก ืคื•ืŸ ืื ื“ืขืจืข ืคึผืจืึทืกืขืกืึทื–, ื“ื™ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขื, ื•ื•ื™ืจื˜ื•ืึทืœ ืžืืฉื™ื ืขืŸ ืื•ืŸ ืคึผืจืึธื˜ืขืงื˜ืขื“ ื™ื ืงืœืึทื•ื•ืขืก. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืขืก ื•ื•ื™ื™ื–ื˜ ื•ื•ื™ ืฆื• ื’ืขืคึฟื™ื ืขืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ื™ ื•ื•ืึธืจืฆืœ ืคึผืึทืจืึธืœ ื”ืึทืฉ ืคึฟื•ืŸ /etc/shadow ื‘ืขืฉืึทืก ืคึผืขืจื™ืึธื“ื™ืฉ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืคืจื•ื•ื•ืŸ (ื“ื™ ื‘ืึทืคืึทืœืŸ ื’ืขื ื•ืžืขืŸ 24 ืฉืขื”);

    ืื™ืŸ ืึทื“ื™ืฉืึทืŸ, ืึท ื‘ื™ื™ืฉืคึผื™ืœ ืคื•ืŸ ืึท ื‘ืึทืคืึทืœืŸ ื ื™ืฆืŸ ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ืื•ืŸ ื•ื•ืขื‘ืึทืกืกืขืžื‘ืœื™ ืื™ื– ื’ืขื•ื•ื™ื–ืŸ ื•ื•ืขืŸ ืขืคืŸ ืึท ื‘ื™ื™ื–ืข ื‘ืœืึทื˜ ืื™ืŸ ื“ื™ ืกืคึผื™ื“ืขืจืžืึธื ืงื™ื™ ืžืึธื˜ืึธืจ (ืื™ืŸ ืžืึธื“ืขืจืŸ ืคื•ืœ-ืคืœืขื“ื–ืฉื“ ื‘ืจืึทื•ื–ืขืจื–, ืึทื–ืึท ืึท ื‘ืึทืคืึทืœืŸ ืื™ื– ืึทื ืœื™ื™ืงืœื™ ืจืขื›ื˜ ืฆื• ืœื™ืžื™ื˜ืขื“ ื˜ื™ื™ึทืžืขืจ ืึทืงื™ืขืจืึทืกื™ ืื•ืŸ ืžื™ื˜ืœืขืŸ ืฆื• ื‘ืึทืฉื™ืฆืŸ ืงืขื’ืŸ ืกืคึผืขืงื˜ืขืจ);

  • ืคืึธืœืึทื•ื˜ (ืคึผื“ืฃ) - ืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ืœื™ื™ืขื ืขืŸ ื“ืึทื˜ืŸ ืœืขืฆื˜ื ืก ื’ืขืฉืจื™ื‘ืŸ ื“ื•ืจืš ื“ื™ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขื ืื•ืŸ ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ื™ OS ื–ื›ึผืจื•ืŸ ืื•ื™ืกืœื™ื™ื’ ืฆื• ืคืึทืจืคึผืึธืฉืขื˜ืขืจืŸ ืื ื“ืขืจืข ืื ืคืืœืŸ;
  • ืงืจืึธื-ืฆื•-ืœื™ืง ืคืึธืจื•ื•ืขืจื“ื™ื ื’ - ืขืงืกืคึผืœื•ื™ืฅ ืงืคึผื• ืึธืคึผื˜ื™ืžื™ื–ืึทื˜ื™ืึธื ืก ืคึฟืึทืจ ืืจื‘ืขื˜ืŸ ืžื™ื˜ ื“ื™ ืกื˜ืึธืจื™ื“ื–ืฉ ื‘ืึทืคืขืจ ืื•ืŸ ืงืขื ืขืŸ ื•ื•ืขืจืŸ ื’ืขื ื•ืฆื˜ ืฆื• ื‘ื™ื™ืคึผืึทืก ื“ื™ ืงืขืจืŸ ืึทื“ืจืขืก ืคึผืœืึทืฅ ืจืึทื ื“ืึทืžื™ื–ื™ื™ืฉืึทืŸ ืžืขืงืึทื ื™ื–ืึทื (KASLR), ืฆื• ืžืึธื ื™ื˜ืึธืจ ื“ื™ ืฉื˜ืึทื˜ ืคื•ืŸ ื“ื™ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขื, ืึธื“ืขืจ ืคึฟืึทืจ ืึธืจื’ืึทื ื™ื–ื™ืจื•ื ื’ ืœื™ืงืก ืื™ืŸ ืงืึธืžื‘ื™ื ืึทืฆื™ืข ืžื™ื˜ ื’ืึทื“ื–ืฉืึทืฅ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ืกืคึผืขืงื˜ืขืจ ืžืขื˜ื”ืึธื“ืก.

ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–:

  • CVE-2018-12126 - MSBDS (Microarchitectural Store Buffer Data Sampling), ืึธืคึผื–ื•ืš ืคื•ืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ืกื˜ืึธืจื™ื“ื–ืฉ ื‘ืึทืคืขืจื–. ื’ืขื•ื•ื™ื™ื ื˜ ืื™ืŸ ื“ื™ ืคืึธืœืึทื•ื˜ ื‘ืึทืคืึทืœืŸ. ื“ืขืจ ื’ืจืึทื“ ืคื•ืŸ ื’ืขืคืึทืจ ืื™ื– ื‘ืืฉืœืืกืŸ ืฆื• ื–ื™ื™ืŸ 6.5 ืคื•ื ืงื˜ืŸ (CVSS);
  • CVE-2018-12127 - MLPDS (Microarchitectural Load Port Data Sampling), ืึธืคึผื–ื•ืš ืคื•ืŸ ืžืึทืกืข ืคึผืึธืจื˜ ืื™ื ื”ืึทืœื˜. ื’ืขื•ื•ื™ื™ื ื˜ ืื™ืŸ ื“ื™ RIDL ื‘ืึทืคืึทืœืŸ. CVSS 6.5;
  • CVE-2018-12130 - MFBDS (Microarchitectural Fill Buffer Data Sampling), ืึธืคึผื–ื•ืš ืคื•ืŸ ืคึผืœืึธืžื‘ื™ืจืŸ ื‘ืึทืคืขืจ ืื™ื ื”ืึทืœื˜. ื’ืขื•ื•ื™ื™ื ื˜ ืื™ืŸ ZombieLoad ืื•ืŸ RIDL ืื ืคืืœืŸ. CVSS 6.5;
  • CVE-2019-11091 - MDSUM (ืžื™ื™ืงืจืึธื•ืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืึทืœ ื“ืึทื˜ืึท ืกืึทืžืคึผืœื™ื ื’ ื•ื ืงืึทื˜ืฉืขืึทื‘ืœืข ื–ื›ึผืจื•ืŸ), ืึธืคึผื–ื•ืš ืคื•ืŸ ื•ื ืงืึทื˜ืฉืึทื‘ืึทืœ ื–ื›ึผืจื•ืŸ ืื™ื ื”ืึทืœื˜. ื’ืขื•ื•ื™ื™ื ื˜ ืื™ืŸ ื“ื™ RIDL ื‘ืึทืคืึทืœืŸ. CVSS 3.8.

ื”ืึทืจืฅ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืคึผืจืึธื‘ืœืขืžืก ืื™ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืฆื•ืœื™ื™ื’ืŸ ื–ื™ื™ึทื˜-ืงืึทื ืึทืœ ืึทื ืึทืœื™ืกื™ืก ืžืขื˜ื”ืึธื“ืก ืฆื• ื“ืึทื˜ืŸ ืื™ืŸ ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืึทืœ ืกื˜ืจืึทืงื˜ืฉืขืจื– ืฆื• ื•ื•ืึธืก ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื˜ืึธืŸ ื ื™ื˜ ื’ืœื™ื™ึทืš ืฆื•ื˜ืจื™ื˜. ืžื™ืจ ื–ืขื ืขืŸ ื’ืขืจืขื“ื˜ ื•ื•ืขื’ืŸ ืึทื–ืึท ื ื™ื“ืขืจื™ืง-ืžื“ืจื’ื” ืกื˜ืจืึทืงื˜ืฉืขืจื– ื•ื•ื™ ืคื™ืœื•ื ื’ ื‘ืึทืคืขืจื– (ืœื™ื ื™ืข ืคึผืœืึธืžื‘ื™ืจืŸ ื‘ืึทืคืขืจ), ืกื˜ืึธืจื™ื“ื–ืฉ ื‘ืึทืคืขืจื– (ืกื˜ืึธืจ ื‘ืึทืคืขืจ) ืื•ืŸ ืžืึทืกืข ืคึผืึธืจืฅ (ืœืึธืึทื“ ืคึผืึธืจื˜), ื•ื•ืึธืก ื–ืขื ืขืŸ ืงืœืขื ืขืจืขืจ ื‘ื ื™ืŸ ื‘ืœืึทืงืก ื•ื•ื™ ื“ืขืจ ืขืจืฉื˜ืขืจ ืžื“ืจื’ื” ืงืึทืฉ (L1D), ื“ืึทื˜ืŸ ืœืึธื“ืŸ ืงืึทืฉ ( RDCL ) ืึธื“ืขืจ L1TF (L1 Terminal Fault), ืื•ืŸ ืึทืงืึธืจื“ื™ื ื’ืœื™ ืึทืจื™ื™ึทื ื ืขืžืขืŸ ื•ื•ื™ื™ื ื™ืงืขืจ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืื•ืŸ ื–ืขื ืขืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื˜ ืžืขืจ ื™ื ื˜ืขื ืกื™ื•ื•ืœื™.

ื ื ื™ื™ึทืข ืงืœืึทืก ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื™ื ื˜ืขืœ ืคึผืจืึทืกืขืกืขืจื– ืื™ื– ื‘ืึทืงืขื ืขื 

ืกื™ื™ื“-ืงืึทื ืึทืœ ืึทื˜ืึทืงืก ืื•ื™ืฃ ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืึทืœ ืกื˜ืจืึทืงื˜ืฉืขืจื– ื–ืขื ืขืŸ ืคื™ืœ ืžืขืจ ืฉื•ื•ืขืจ ืฆื• ื“ื•ืจื›ืคื™ืจืŸ ืงืึทืžืคึผืขืจื“ ืžื™ื˜ ืžืขื˜ื”ืึธื“ืก ืคึฟืึทืจ ืจื™ืกื˜ืึธืจื™ื ื’ ืงืึทืฉ ืื™ื ื”ืึทืœื˜ ืื•ืŸ ื“ืึทืจืคืŸ ื˜ืจืึทืงื™ื ื’ ืื•ืŸ ืึทื ืึทืœื™ื™ื–ื™ื ื’ ื‘ืึทื˜ื™ื™ื˜ื™ืง ืึทืžืึทื•ื ืฅ ืคื•ืŸ ื“ืึทื˜ืŸ ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ื–ื™ื™ืขืจ ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’ ืžื™ื˜ ื–ื™ื›ืขืจ ืึทื“ืจืขืกืขืก ืื™ืŸ ื–ื›ึผืจื•ืŸ (ืื™ืŸ ืขืกืึทื ืก, ืึท ืึทื˜ืึทืงืขืจ ืงืขืŸ ื ื™ืฉื˜ ืคึผืขืจืคึผืึทืกืœื™ ื™ื ื˜ืขืจืกืขืคึผื˜ ื–ื™ื›ืขืจ ื“ืึทื˜ืŸ , ืึธื‘ืขืจ ืงืขืŸ ืฆื™ื™ื˜ ืฆื• ืึธื ืงืœื™ื™ึทื‘ืŸ ืœื™ืงืก ืื•ืŸ ืฆื•ืœื™ื™ื’ืŸ ืกื˜ืึทื˜ื™ืกื˜ื™ืฉ ืžืขื˜ื”ืึธื“ืก ืฆื• ืจืขืงืึธื ืกื˜ืจื•ื™ืจืŸ ื–ื™ื›ืขืจ ื˜ื™ื™ืคึผืก ืคื•ืŸ ื“ืึทื˜ืŸ). ืึทื“ื“ื™ื˜ื™ืึธื ืึทืœืœื™, ื“ื™ ื‘ืึทืคืึทืœืŸ ื‘ืœื•ื™ื– ืึทืคืขืงืฅ ื“ืึทื˜ืŸ ืื•ื™ืฃ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ื’ืฉืžื™ื•ืช ืงืคึผื• ื”ืึทืจืฅ ื•ื•ื™ ื“ื™ ืึทื˜ืึทืงืขืจ ืก ืงืึธื“.

ื“ื™ ืคืืจื’ืขืœื™ื™ื’ื˜ ืžืขื˜ื”ืึธื“ืก ืคึฟืึทืจ ื“ื™ื˜ืขืจืžืึทื ื™ื ื’ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืึทืœ ืกื˜ืจืึทืงื˜ืฉืขืจื– ื–ืขื ืขืŸ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ืคืึทืงื˜ ืึทื– ื“ื™ ืกื˜ืจืึทืงื˜ืฉืขืจื– ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜ ื‘ืขืฉืึทืก ืกืคึผืขืงื•ืœืึทื˜ื™ื•ื•ืข ื”ืึทื ื“ืœื™ื ื’ ืคื•ืŸ ืื•ื™ืกื ืขืžืขืŸ (ืคืึธืœืฅ) ืึธื“ืขืจ ืžืึทืกืข ืื•ืŸ ืงืจืึธื ืึทืคึผืขืจื™ื™ืฉืึทื ื–.
ื‘ืขืฉืึทืก ืกืคึผืขืงื•ืœืึทื˜ื™ื•ื•ืข ื“ื•ืจื›ืคื™ืจื•ื ื’, ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื™ื ืขืจืœืขืš ืกื˜ืจืึทืงื˜ืฉืขืจื– ื–ืขื ืขืŸ ืจื™ื“ืขืจืขืงื˜ื™ื“ ืฆื• ืจืขื“ื–ืฉื™ืกื˜ืขืจื– ืึธื“ืขืจ ืงืึทื˜ืฉืขืก ืคึฟืึทืจ ืคึผืจืึทืกืขืกื™ื ื’. ืกืคึผืขืงื•ืœืึทื˜ื™ื•ื•ืข ืึทืคึผืขืจื™ื™ืฉืึทื ื– ื˜ืึธืŸ ื ื™ื˜ ืคืึทืจืขื ื“ื™ืงืŸ ืื•ืŸ ื“ืขืจ ืจืขื–ื•ืœื˜ืึทื˜ ืื™ื– ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ, ืึธื‘ืขืจ ื“ื™ ืจื™ื“ืขืจืขืงื˜ื™ื“ ืื™ื ื”ืึทืœื˜ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื‘ืืฉืœืืกืŸ ื ื™ืฆืŸ ื–ื™ื™ึทื˜-ืงืึทื ืึทืœ ืงืึทืฉ ืึทื ืึทืœื™ืกื™ืก ื˜ืขืงื ื™ืงืก.

ืžืึทืกืข ืคึผืึธืจืฅ ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜ ื“ื•ืจืš ื“ื™ ืคึผืจืึทืกืขืกืขืจ ืฆื• ื‘ืึทืงื•ืžืขืŸ ื“ืึทื˜ืŸ ืคื•ืŸ ื–ื›ึผืจื•ืŸ ืึธื“ืขืจ ื“ื™ I/O ืกืึทื‘ืกื™ืกื˜ืขื ืื•ืŸ ืฆื•ืฉื˜ืขืœืŸ ื“ื™ ื‘ืืงื•ืžืขืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืฆื• ื“ื™ ืงืคึผื• ืจืขื“ื–ืฉื™ืกื˜ืขืจื–. ืจืขื›ื˜ ืฆื• ื“ืขืจ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืฉื˜ืจื™ืš, ื“ืึทื˜ืŸ ืคื•ืŸ ืึทืœื˜ ืืจืืคืงืืคื™ืข ืึทืคึผืขืจื™ื™ืฉืึทื ื– ื‘ืœื™ื™ื‘ืŸ ืื™ืŸ ื“ื™ ืคึผืึธืจืฅ ื‘ื™ื– ื–ื™ื™ ื–ืขื ืขืŸ ืึธื•ื•ื•ืขืจืจื™ื˜ืึทืŸ ื“ื•ืจืš ื ื™ื™ึทืข ื“ืึทื˜ืŸ, ื•ื•ืึธืก ืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ืžื™ื ืึทืฆืึทื“ ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ื™ ืฉื˜ืึทื˜ ืคื•ืŸ ื“ื™ ื“ืึทื˜ืŸ ืื™ืŸ ื“ื™ ืืจืืคืงืืคื™ืข ืคึผืึธืจื˜ ื“ื•ืจืš ืžืึทื ื™ืคึผื™ืึทืœื™ื™ื˜ื™ื ื’ ืื•ื™ืกื ืขืžืขืŸ (ืคืึธืœืฅ) ืื•ืŸ SSE / AVX / AVX-512 ืื™ื ืกื˜ืจื•ืงืฆื™ืขืก ื•ื•ืึธืก ืœืึธื“ืŸ ืžืขืจ ื•ื•ื™ 64 ื‘ื™ืฅ ื“ืึทื˜ืŸ. ืื•ื ื˜ืขืจ ืึทื–ืึท ื˜ื ืึธื™ื, ืžืึทืกืข ืึทืคึผืขืจื™ื™ืฉืึทื ื– ืกืคึผืขืงื•ืœืึทื˜ื™ื•ื•ืขืœื™ ื•ื™ืกืฉื˜ืขืœืŸ ืึทืœื˜ - ื’ืขื‘ืึทืงืŸ ื“ืึทื˜ืŸ ื•ื•ืึทืœื•ืขืก ืคื•ืŸ ื™ื ืขืจืœืขืš ืกื˜ืจืึทืงื˜ืฉืขืจื– ืฆื• ืึธืคืขื ื’ื™ืง ืึทืคึผืขืจื™ื™ืฉืึทื ื–. ืื™ืŸ ืึท ืขื ืœืขืš ื•ื•ืขื’, ืึท ืจื™ื ืขืŸ ืื™ื– ืึธืจื’ืึทื ื™ื–ื™ืจื˜ ื“ื•ืจืš ื“ื™ ืกื˜ืึธืจื™ื“ื–ืฉ ื‘ืึทืคืขืจ, ื•ื•ืึธืก ืื™ื– ื’ืขื ื•ืฆื˜ ืฆื• ืคืึทืจื’ื™ื›ืขืจืŸ ืฉืจื™ื™ื‘ืŸ ืฆื• ื“ื™ ืงืคึผื• ืงืึทืฉ ืื•ืŸ ื›ื•ืœืœ ืึท ื˜ื™ืฉ ืคื•ืŸ ืึทื“ืจืขืกืขืก, ื•ื•ืึทืœื•ืขืก ืื•ืŸ ืคืœืึทื’ืก, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื“ื•ืจืš ื“ื™ ืคื™ืœื•ื ื’ ื‘ืึทืคืขืจ, ื•ื•ืึธืก ื›ึผื•ืœืœ ื“ืึทื˜ืŸ ื•ื•ืึธืก ืื™ื– ื ืึธืš ื ื™ืฉื˜ ืื™ืŸ ื“ื™ L1 ืงืึทืฉ (ืงืึทืฉ-ืคืึทืจืคื™ืจืŸ), ืคึฟืึทืจ ื“ื™ ืฆื™ื™ื˜ ืœืึธื•ื“ื™ื ื’ ืคึฟื•ืŸ ืงืึทื˜ืฉืขืก ืคื•ืŸ ืื ื“ืขืจืข ืœืขื•ื•ืขืœืก.

ื ื ื™ื™ึทืข ืงืœืึทืก ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื™ื ื˜ืขืœ ืคึผืจืึทืกืขืกืขืจื– ืื™ื– ื‘ืึทืงืขื ืขื 

ืคึผืจืึธื‘ืœืขื ืึทืคืขืงืฅ ื™ื ื˜ืขืœ ืคึผืจืึทืกืขืกืขืจ ืžืึธื“ืขืœืก ื’ืขืฉืืคืŸ ื–ื™ื ื˜ 2011 (ืกื˜ืึทืจื˜ื™ื ื’ ืคื•ืŸ ื“ื™ 6 ื“ื•ืจ). ืื™ืŸ ื“ืขื ืคืึทืœ, ื™ื™ึทื–ื ื•ื•ืึทืจื’ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ืืคื’ืขืฉื˜ืขืœื˜ ืกื˜ืึทืจื˜ื™ื ื’ ืคื•ืŸ ืขื˜ืœืขื›ืข ืžืึธื“ืขืœืก ืคื•ืŸ ื“ื™ 8 ืื•ืŸ 9 ื“ื•ืจ ืคื•ืŸ Intel Core ืื•ืŸ 2 ื“ื•ืจ ืคื•ืŸ Intel Xeon Scalable (ืื™ืจ ืงืขื ืขืŸ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื ื™ืฆืŸ ื“ื™ ARCH_CAP_MDS_NO ื‘ื™ืกืœ ืื™ืŸ IA32_ARCH_CAPABILITIES MSR). ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ืื•ื™ืš ืฉื•ื™ืŸ ื™ืœื™ืžืึทื ื™ื™ื˜ืึทื“ ืื™ืŸ ื“ืขืจ ืžื“ืจื’ื” ืคื•ืŸ ืคื™ืจืžื•ื•ืึทืจืข, ืžื™ืงืจืึธืงืึธื“ืข ืื•ืŸ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขืžืขืŸ. ื™ื ื˜ืขืœ ืขืกื˜ืึทืžืึทืฅ ืคืึธืจืฉื˜ืขืœื•ื ื’ ืึธื ื•ื•ืขืจ ื ืึธืš ืึทืงื˜ืึทื•ื•ื™ื™ื˜ื™ื ื’ ื“ื™ ืœืึทื˜ืข ืคึฟืึทืจ ืจื•ื‘ึฟ ื™ื•ื–ืขืจื– ื•ื•ื™ื™ื ื™ื’ืขืจ ื•ื•ื™ 3%. ื•ื•ืขืŸ Hyper-Threading ื˜ืขื›ื ืึธืœืึธื’ื™ืข ืื™ื– ืคืึทืจืงืจื™ืคึผืœื˜, ืคืึธืจืฉื˜ืขืœื•ื ื’ ื“ืขืจื ื™ื“ืขืจื™ืงื•ื ื’ ืงืขื ืขืŸ ื“ืขืจื’ืจื™ื™ื›ืŸ ืึทืจื•ื™ืฃ ืฆื• 9% ืื™ืŸ ื“ื™ SPECint_rate_base ืคึผืจืึธื‘ืข, ืึทืจื•ื™ืฃ ืฆื• 11% ืื™ืŸ ืึทืงื˜ื™ื•ื• ื™ื ื˜ืึทื“ื–ืฉืขืจ ื—ืฉื‘ื•ื ื•ืช, ืื•ืŸ ืึทืจื•ื™ืฃ ืฆื• 19% ื•ื•ืขืŸ ืคืœื™ืกื ื“ื™ืง ืกืขืจื•ื•ืขืจ-ื–ื™ื™ึทื˜ Java ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– (ืžื™ื˜ HT ืขื ื™ื™ื‘ืึทืœื“, ืขืก ืื™ื– ื›ึผืžืขื˜ ืงื™ื™ืŸ ืคืึธืจืฉื˜ืขืœื•ื ื’ ื“ืขืจื ื™ื“ืขืจื™ืงื•ื ื’). ื“ื™ ืคึผืึทื˜ืฉืึทื– ื”ืึธื‘ืŸ ืึท ืงืœื™ื™ืŸ ืคึผืจืึทืœ ืื•ื™ืฃ ื“ื™ I / O ืคืึธืจืฉื˜ืขืœื•ื ื’.

ืœื™ื ื•ืงืก ืงืขืจืŸ ืคึผืจืึทื˜ืขืงืฅ ืงืขื’ืŸ MDS ืฆื•ื’ืขื’ืขื‘ืŸ ืื™ืŸ ื”ื™ื™ื ื˜ื™ืงืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืงืกื ื•ืžืงืก, ืงืกื ื•ืžืงืก,
4.19.43, 4.14.119 ืื•ืŸ 4.9.176. ืฉื•ืฅ ืื•ืคึฟืŸ ืื•ื ื˜ืขืจ ืงืึทื ืกื˜ืจืึทืงืฉืึทืŸ ืฆื• ื•ื™ืกืžืขืงืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืึทืœ ื‘ืึทืคืขืจื– ืื™ืŸ ื“ืขืจ ืฆื™ื™ื˜ ืคื•ืŸ ืฆื•ืจื™ืงืงื•ืžืขืŸ ืคื•ืŸ ื“ื™ ืงืขืจืŸ ืฆื• ื‘ืึทื ื™ืฆืขืจ ืคึผืœืึทืฅ ืึธื“ืขืจ ื•ื•ืขืŸ ื˜ืจืึทื ืกืคืขืจื™ื ื’ ืงืึธื ื˜ืจืึธืœ ืฆื• ื“ื™ ื’ืึทืกื˜ ืกื™ืกื˜ืขื, ืคึฟืึทืจ ื•ื•ืึธืก ื“ื™ VERW ืœื™ืžืขื“ ืื™ื– ื’ืขื ื™ืฆื˜. ืคึฟืึทืจ ื“ื™ ืฉื•ืฅ ืฆื• ืึทืจื‘ืขื˜ืŸ, ืขืก ืจื™ืงื•ื•ื™ื™ืขืจื– ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ MD_CLEAR ืžืึธื“ืข, ื™ืžืคึผืœืึทืžืขื ืึทื“ ืื™ืŸ ื“ื™ ืœืขืฆื˜ืข ืžื™ืงืจืึธืงืึธื“ืข ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ. ืคึฟืึทืจ ื’ืึทื ืฅ ืฉื•ืฅ, ืขืก ืื™ื– ืื•ื™ืš ืจืขืงืึทืžืขื ื“ื™ื“ ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ Hyper Threading. ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ื•ื™ืกืฉื˜ืขืœืŸ ืคื•ืŸ ื“ื™ ืกื™ืกื˜ืขื ืฆื• ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ ืฆื•ื’ืขื’ืขื‘ืŸ ื”ืึทื ื“ืœืขืจ "/sys/devices/system/cpu/vulnerabilities/mds". ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ื™ื ืงืœื•ื–ืฉืึทืŸ ืคื•ืŸ ืคืึทืจืฉื™ื“ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื‘ืœืึทืงื™ื ื’ ืžืึธื“ืขืก, ื“ื™ "mds =" ืคึผืึทืจืึทืžืขื˜ืขืจ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ื“ื™ ืงืขืจืŸ, ื•ื•ืึธืก ืงืขื ืขืŸ ื ืขืžืขืŸ ื“ื™ ื•ื•ืึทืœื•ืขืก "ืคื•ืœ", "ืคื•ืœ, ื ืึธืกืž" (ื“ื™ืกื™ื™ื‘ืึทืœื™ื ื’ ื”ื™ืคึผืขืจ-ืคึฟืขื“ืขื), "ื•ื•ืžื•ื•ืขืจื•ื•" ืื•ืŸ "ืึทื•ื•ืขืง".

ืคึผืขืงืœ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ืจืขืœืขืึทืกืขื“ ืคึฟืึทืจ rhel ะธ ื•ื‘ื•ื ื˜ื•, ืึธื‘ืขืจ ื‘ืœื™ื™ื‘ืŸ ืึทื ืึทื•ื•ื™ื™ืœืึทื‘ืึทืœ ืคึฟืึทืจ ืื™ืฆื˜ ื“ืขื‘ื™ืึทืŸ, ืคืขื“ืึธืจืึท ะธ sususe.
ื ืคืึทืจืจื™ื›ื˜ืŸ ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ื“ืึทื˜ืŸ ืœื™ืงืก ืคื•ืŸ ื•ื•ื™ืจื˜ื•ืึทืœ ืžืืฉื™ื ืขืŸ ืื•ื™ืš ื’ืขืฉืืคืŸ ืคึฟืึทืจ ื“ื™ Xen ื›ื™ื™ืคึผืขืจื•ื•ื™ื™ื–ืขืจ. ืฆื• ื‘ืึทืฉื™ืฆืŸ ื•ื•ื™ืจื˜ื•ืึทืœื™ื–ืึทื˜ื™ืึธืŸ ืกื™ืกื˜ืขืžืขืŸ ื•ื•ืึธืก ืึทืจื•ื™ืกื’ืขื‘ืŸ ื“ื™ L1D_FLUSH ื‘ืึทืคึฟืขืœ ืื™ื™ื“ืขืจ ื˜ืจืึทื ืกืคืขืจื™ื ื’ ืงืึธื ื˜ืจืึธืœ ืฆื• ืืŸ ืื ื“ืขืจ ื•ื•ื™ืจื˜ื•ืึทืœ ืžืึทืฉื™ืŸ, ืื•ืŸ ืฆื• ื‘ืึทืฉื™ืฆืŸ Intel SGX ืขื ืงืœืึทื•ื•ืขืก, ืึท ืžื™ืงืจืึธืงืึธื“ืข ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืื™ื– ื’ืขื ื•ื’.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’