Tavis Ormandy, ืึท ืืืืขืจืืืื ืคืึธืจืฉืขืจ ืืื Google, ืืื ืืืืขื ืึทืคืืื ืึท ื ืืึทืข ืืืึทืื ืขืจืึทืืืืืื (CVE-2023-23583) ืืื ืื ืืขื ืคึผืจืึทืกืขืกืขืจื, ืงืึธืืขื ืึทืืขื ืจืขืคึผืืึทืจ, ืืืึธืก ืืขืจ ืืืืคึผื ืคึผืึธืืืึทื ืึท ืกืึทืงืึธื ืข ืฆื ืืืึธืืงื ืกืืกืืขืืขื ืืืึธืก ืืืืคื ืืืืจืืืึทื ืืืฉืื ืขื ืคืื ืคืึทืจืฉืืืขื ืข ื ืืฆืขืจืก. ืื ืืืึทืื ืขืจืึทืืืืืื ืึทืืึทืื ืื ืกืืกืืขื ืฆื ืืขื ืืขื ืึธืืขืจ ืงืจืึทื ืืืขื ืืืืขืจ ืึทืคึผืขืจืืืฉืึทื ื ืืขื ืขื ืืืจืืืขืงืึธืื ืืืืฃ ืึทื ืคึผืจืืืืืืืืืฉื ืืึทืกื ืกืืกืืขืืขื. ืฆื ืคึผืจืืืืจื ืืืื ืกืืกืืขืืขื, ืึท ื ืืฆื ืืื ืืจืืืก ืืืึธืก ืงืจืืืืฅ ืื ืึธืื ืคึฟืึทืจ ืื ืืึทื ืึทืคืขืกืืืืฉืึทื ืคืื ืืืึทืื ืขืจืึทืืืืืืื.
ืืืขืึธืจืขืืืงืึทืืื, ืื ืืืึทืื ืขืจืึทืืืืืื ืงืขื ืขื ืืืื ืืขืืืืื ื ืฆื ืขืกืงืึทืืืื ืคึผืจืืืืืืึทืืืฉืึทื ืคืื ืื ืืจืื ืฆื ืื ื ืื ืฉืืฅ ืจืื ื (CPL0) ืืื ืึทื ืืืืืคื ืคืื ืืคืืขืืื ืืขืจื ืื ืืืืืจืึทื ืืึทื ืฅ, ืึธืืขืจ ืืขื ืกืฆืขื ืึทืจ ืืื ื ืึธื ื ืืฉื ืืืฉืืขืืืงื ืืื ืคืืจ ืจืขืื ืฆื ืื ืฉืืืขืจืืงืืืื ืคืื ืืืืึทืืื ื ืืืืฃ ืื ืืืงืจืึธืึทืจืืฉืืืขืงืืืจืึทื ืืืจืื. ืึทื ืื ืขืจืืขื ืจืขืฆืขื ืืืข ืืื ืื ืืขื ืืืื ืืขืืืืื ืื ืคึผืึธืืขื ืฆืืขื ืคึฟืึทืจ ืขืงืกืคึผืืืืืืืฉืึทื ืคืื ืื ืืืึทืื ืขืจืึทืืืืืื ืฆื ืขืกืงืึทืืืื ืคึผืจืืืืืืึทืืืฉืึทื ืืื ืืขืจ ืืืืขืจ ืื ืึธืื.
ืืืื ืืขืจ ืคืึธืจืฉืขืจ, ืื ืืืึทืื ืขืจืึทืืืืืื ืืื ืคืึธืจืฉืืขืื ืืื ืื Intel Ice Lake, Rocket Lake, Tiger Lake, Raptor Lake, Alder Lake ืืื Sapphire Rapids ืคึผืจืึทืกืขืกืขืจ ืคืึทืืืืืขืก. ืืขืจ ืื ืืขื ืืึทืจืืื ืืขืจืืื ื ืึทื ืื ืคึผืจืึธืืืขื ืืื ืกืืึทืจืืื ื ืคืื ืื 10 ืืืจ (ืืืื ืืืืง) ืคืื ืื ืืขื ืงืึธืจ ืคึผืจืึทืกืขืกืขืจื ืืื ืื ืืจืื ืืืจ ืคืื Xeon ืกืงืึทืืึทืืืข ืคึผืจืึทืกืขืกืขืจื, ืืื ืืขืืื ื ืืื ืืื Xeon E / D / W ืคึผืจืึทืกืขืกืขืจื (Ice Lake, Skylake, Haswell, Broadwell , Skylake, Sapphire Rapids, Emerald Rapids, Cascade Lake, Cooper Lake, Comet Lake, Rocket Lake) ืืื Atom (Apollo Lake, Jasper Lake, Arizona Beach, Alder Lake, Parker Ridge, Snow Ridge, Elkhart Lake and Denverton). ืื ืืืึทืื ืขืจืึทืืืืืื ืืื ืงืฉืื ืืื ืคืึทืจืคืขืกืืืงื ืืื ื ืขืืื ืืืงืจืึธืงืึธืืข ืืขืจืืืึทื ืืืงื 20231114.
ืื ืืืึทืื ืขืจืึทืืืืืื ืืื ืืขืคึฟืืจื ืืืจื ืื ืคืึทืงื ืึทื ืืื ืืขืจ ืืืืขืจ ืืืงืจืึธืึทืจืืฉืืืขืงืืืจืึทื ืฆืืฉืืื ืื, ืื ืืืจืืคืืจืื ื ืคืื ืื "REP MOVSB" ืืืืขื ืืื ืขื ืงืึธืืืื ืืื ืึท ืืืขืจืืง "REX" ืคึผืจืขืคืืงืก, ืืืึธืก ืคืืจื ืฆื ืึทื ืืืคืืื ื ื ืึทืืืจ. ืืขืจ ืคึผืจืึธืืืขื ืืื ืืืกืงืึทืืืขืจื ืืขืฉืึทืก ืืขืกืืื ื ืคืื ืืืขืจืืง ืคึผืจืขืคืืงืก, ืืืึธืก ืืื ืืขืึธืจืืข ืืึธื ืืืื ืืืื ืึธืจืืจื, ืึธืืขืจ ืืื ืคืืจ ืืขืคืืจื ืฆื ืืึธืื ืข ืืคืขืงืฅ, ืึทืืึท ืืื ืืืื ืึธืจืืจื ืืืืึทืืื ืื ืฆืืืืืื ืืื ืืจืืืงืื ื ืืืึทืื ืฉืคึผืึธืจื ืืื ืื xsave ืืื ืจืืคื ืื ืกืืจืึทืงืฉืึทื ื. ืืืืึทืืขืจ ืึทื ืึทืืืกืืก ืืขืืืืื ืึทื ืึทืืื ื ืึท ืืืขืจืืง ืคึผืจืขืคืืงืก ืฆื ืื ืืืืขื "REP MOVSB" ื ืื ืงืึธืจืืคึผืฆืืข ืคืื โโโโืื ืืื ืืึทืื ืคืื ืื ROB (ReOrder Buffer) ืืึทืคืขืจ ืืขื ืืฆื ืฆื ืกืืจ ืื ืกืืจืึทืงืฉืึทื ื.
ืขืก ืืื ืืขืืืื ื ืึทื ืืขืจ ืืขืืช ืืื ืืขืคึฟืืจื ืืืจื ืึท ืคืึทืืฉ ืืขืืฉืื ืคืื ืื ืืจืืืก ืคืื ืื ืืืืขื "MOVSB", ืืืึธืก ืคืืจื ืฆื ืื ืืืืขื ืคืื ืื ืึทืืจืขืกืื ื ืคืื ืื ืกืืจืึทืงืฉืึทื ื ืืขืฉืจืืื ืฆื ืื ROB ืืึทืคืขืจ ื ืึธื ืื MOVSB โโืืื ืึท ืืืขืจืืง ืคึผืจืขืคืืงืก ืืื ืคืึธืืึธ. ืคืื ืื ืืืืขื ืืืึทืื. ืึทืืึท ืืขืกืื ืืฉืจืึธื ืืืึทืืืึธื ืงืขื ืขื ืืืื ืืืืืืขื ืฆื ืืืกืจืึทืคึผืฉืึทื ืคืื ืื ืืขืจืืืืืื ืืฉืืื ืืช ืืื ืกืึทืืกืึทืงืืืึทื ื ืจืขืกืืขืจืืืฉืึทื ืคืื ืื ืื ืืึทืืจืึทื ืฉืืึทื. ืึธืืขืจ ืืืื ืืืจ ืงืจืึทื ืงืืืคื ืงืึธืจืขืก ืึธืืขืจ SMT ืคึฟืขืืขื ืืื ืืขืจ ืืขืืืืงืขืจ ืฆืืื, ืืืจ ืงืขื ืขื ืฉืขืืืงื ืื ืืืงืจืึธืึทืจืืฉืืืขืงืืืจืึทื ืฉืืึทื ืืขื ืื ืฆื ืงืจืึทื.
ืืงืืจ: opennet.ru
