ื ื ื™ื™ึทืข ื•ื•ืึทืจื™ืึทื ื˜ ืคื•ืŸ ื“ื™ Zombieload ื‘ืึทืคืึทืœืŸ ืื•ื™ืฃ ื™ื ื˜ืขืœ ืคึผืจืึทืกืขืกืขืจื– ืื™ื– ื™ื™ื“ืขื ืึทืคื™ื™ื“

ืจืขืกืขืึทืจื˜ืฉืขืจืก ืคื•ืŸ ื“ื™ ื˜ืขื›ื ื™ืฉืข ืื•ื ื™ื•ื•ืขืจืกื™ื˜ืขื˜ ืคื•ืŸ ื’ืจืึทื– (ืขืกื˜ืจื™ื™ึทืš) ืึทื ื˜ื“ืขืงื˜ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ืึท ื ื™ื™ึทืข ืื•ืคึฟืŸ ืคื•ืŸ ื‘ืึทืคืึทืœืŸ ื“ื•ืจืš ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ื˜ืฉืึทื ืึทืœื– ื–ืึทืžื‘ื™ ืœืึธื“ืŸ 2.0 (CVE-2019-11135), ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืขืงืกื˜ืจืึทืงื˜ ืงืึทื ืคืึทื“ืขื ื˜ืฉืึทืœ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ืื ื“ืขืจืข ืคึผืจืึทืกืขืกืึทื–, ื“ื™ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขื, ื•ื•ื™ืจื˜ื•ืึทืœ ืžืืฉื™ื ืขืŸ ืื•ืŸ ืคึผืจืึธื˜ืขืงื˜ืขื“ ืขื ืงืœืึทื•ื•ืขืก (ื˜ื™, ื˜ืจืึทืกื˜ื™ื“ ืขืงืกืขืงื•ื˜ื™ืึธืŸ ืกื•ื•ื™ื•ื•ืข). ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืึทืคืขืงืฅ ื‘ืœื•ื™ื– ื™ื ื˜ืขืœ ืคึผืจืึทืกืขืกืขืจื–. ืงืึทืžืคึผืึธื•ื ืึทื ืฅ ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ื“ืขื ืคึผืจืึธื‘ืœืขื ืคืืจื’ืขืœื™ื™ื’ื˜ ืื™ืŸ ื ืขื›ื˜ืŸ ืžื™ืงืจืึธืงืึธื“ืข ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ.

ื“ืขืจ ืคึผืจืึธื‘ืœืขื ื’ืขื”ืขืจื˜ ืฆื• ื“ื™ MDS (Microarchitectural Data Sampling) ืงืœืึทืก ืื•ืŸ ืื™ื– ืึท ืžืึทื“ืขืจื ื™ื™ื–ื“ ื•ื•ืขืจืกื™ืข ื’ืขืžืื›ื˜ ืฆื™ื‘ื•ืจ ืื™ืŸ ืžื™ื™ึท ZombieLoad ืื ืคืืœืŸ. ZombieLoad 2.0, ื•ื•ื™ ืื ื“ืขืจืข MDS ืื ืคืืœืŸ, ืจื™ืœื™ื™ื– ืื•ื™ืฃ ื“ื™ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ ืคื•ืŸ ื–ื™ื™ึทื˜-ืงืึทื ืึทืœ ืึทื ืึทืœื™ืกื™ืก ื˜ืขืงื ื™ืงืก ืฆื• ื“ืึทื˜ืŸ ืื™ืŸ ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืึทืœ ืกื˜ืจืึทืงื˜ืฉืขืจื– (ืœืžืฉืœ, Line Fill Buffer ืื•ืŸ Store Buffer), ื•ื•ืึธืก ื˜ืขืžืคึผืขืจืขืจืึทืœื™ ืงืจืึธื ื“ืึทื˜ืŸ ื’ืขื ื™ืฆื˜ ืื™ืŸ ื“ืขื ืคึผืจืึธืฆืขืก. .

ื ื™ื• Zombieload ื‘ืึทืคืึทืœืŸ ื•ื•ืึทืจื™ืึทื ื˜ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ืจื™ื ืขืŸ ื•ื•ืึธืก ืึทืงืขืจื– ื‘ืขืฉืึทืก ื“ื™ ืึธืคึผืขืจืึทืฆื™ืข ืคื•ืŸ โ€‹โ€‹ื“ื™ ืžืขืงืึทื ื™ื–ืึทื ืคึฟืึทืจ ื™ื™ืกื™ื ื’ืงืจืึทื ืึทืก ื™ื‘ืขืจืจื™ื™ึทืก ืคื•ืŸ ืึทืคึผืขืจื™ื™ืฉืึทื ื– (TAA, TSX Asynchronous Abort), ื™ืžืคึผืœืึทืžืขื ืึทื“ ืื™ืŸ ื“ื™ TSX (Transactional Synchronization Extensions) ืคืึทืจืœืขื ื’ืขืจื•ื ื’, ื•ื•ืึธืก ื’ื™ื˜ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืืจื‘ืขื˜ืŸ ืžื™ื˜ ื˜ืจืึทื ืกืึทืงื˜ื™ืึธื ืึทืœ ื–ื›ึผืจื•ืŸ, ื•ื•ืึธืก ืึทืœืึทื•ื– ื™ื ืงืจื™ืกื™ื ื’ ื“ื™ ืคืึธืจืฉื˜ืขืœื•ื ื’ ืคื•ืŸ ืžื•ืœื˜ื™-ื˜ืจืขื“ื™ื“ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ื“ื•ืจืš ื“ื™ื ืึทืžื™ืงืึทืœืœื™ ื™ืœื™ืžืึทื ื™ื™ื˜ื™ื ื’ ื•ืžื ื™ื™ื˜ื™ืง ืกื™ื ื’ืงืจืึทื ืึทื–ื™ื™ืฉืึทืŸ ืึทืคึผืขืจื™ื™ืฉืึทื ื– (ื’ืขืฉื˜ื™ืฆื˜ ืึทื˜ืึธืžื™ืฉืข ื˜ืจืึทื ื–ืึทืงืฉืึทื ื– ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ืื ื’ืขื ื•ืžืขืŸ ืึธื“ืขืจ ืึทื‘ืึธืจื˜ื™ื“). ืื•ื™ื‘ ื™ื ื˜ืขืจืึทืคึผื˜ื™ื“, ืึทืคึผืขืจื™ื™ืฉืึทื ื– ื’ืขื˜ืืŸ ืื•ื™ืฃ ื“ื™ ื˜ืจืึทื ืกืึทืงื˜ื™ืึธื ืึทืœ ื–ื›ึผืจื•ืŸ ื’ืขื’ื ื˜ ื–ืขื ืขืŸ ืจืึธื•ืœื“ ืฆื•ืจื™ืง.

ื“ื™ ื˜ืจืึทื ืกืึทืงื˜ื™ืึธืŸ ืึทื‘ืึธืจื˜ ืึทืงืขืจื– ื™ื™ืกื™ื ื’ืงืจืึทื ืึทืกืœื™, ืื•ืŸ ื‘ืขืฉืึทืก ื“ืขื ืžืึธืœ ืื ื“ืขืจืข ืคึฟืขื“ืขื ืงืขื ืขืŸ ืึทืงืกืขืก ื“ื™ ืงืึทืฉ, ื•ื•ืึธืก ืื™ื– ืื•ื™ืš ื’ืขื ื™ืฆื˜ ืื™ืŸ ื“ื™ ื“ื™ืกืงืึทืจื“ื™ื“ ื˜ืจืึทื ืกืึทืงื˜ื™ืึธื ืึทืœ ื–ื›ึผืจื•ืŸ ื’ืขื’ื ื˜. ื‘ืขืฉืึทืก ื“ื™ ืฆื™ื™ื˜ ืคื•ืŸ ื“ื™ ืึธื ื”ื™ื™ื‘ ืฆื• ื“ื™ ืคืึทืงื˜ื™ืฉ ืงืึทืžืคึผืœื™ืฉืึทืŸ ืคื•ืŸ ืึท ื™ื™ืกื™ื ื’ืงืจืึทื ืึทืก ื˜ืจืึทื ืกืึทืงื˜ื™ืึธืŸ ืึทื‘ืึธืจื˜, ืกื™ื˜ื•ืึทื˜ื™ืึธื ืก ืงืขืŸ ืื•ื™ืคืฉื˜ื™ื™ืŸ ื•ื•ื• ื“ืขืจ ืคึผืจืึทืกืขืกืขืจ, ื‘ืขืฉืึทืก ื“ื™ ืกืคึผืขืงื•ืœืึทื˜ื™ื•ื•ืข ื“ื•ืจื›ืคื™ืจื•ื ื’ ืคื•ืŸ ืึทืŸ ืึธืคึผืขืจืึทืฆื™ืข, ืงืขื ืขืŸ ืœื™ื™ืขื ืขืŸ ื“ืึทื˜ืŸ ืคื•ืŸ ื™ื ืขืจืœืขืš ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืึทืœ ื‘ืึทืคืขืจื– ืื•ืŸ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืขืก ืฆื• ื“ื™ ืกืคึผืขืงื•ืœืึทื˜ื™ื•ื•ืข ืึธืคึผืขืจืึทืฆื™ืข. ื“ืขืจ ืงืึธื ืคืœื™ืงื˜ ื•ื•ืขื˜ ื“ืขืžืึธืœื˜ ื–ื™ื™ืŸ ื“ื™ื˜ืขืงื˜ืึทื“ ืื•ืŸ ื“ื™ ืกืคึผืขืงื•ืœืึทื˜ื™ื•ื•ืข ืึธืคึผืขืจืึทืฆื™ืข ื“ื™ืกืงืึทืจื“ื™ื“, ืึธื‘ืขืจ ื“ื™ ื“ืึทื˜ืŸ ื•ื•ืขื˜ ื‘ืœื™ื™ึทื‘ืŸ ืื™ืŸ ื“ื™ ืงืึทืฉ ืื•ืŸ ืงืขื ืขืŸ ื–ื™ื™ืŸ ืจื™ื˜ืจื™ื•ื•ื“ ื ื™ืฆืŸ ื–ื™ื™ึทื˜-ืงืึทื ืึทืœ ืงืึทืฉ ืึธืคึผื–ื•ืš ื˜ืขืงื ื™ืงืก.

ื“ื™ ื‘ืึทืคืึทืœืŸ ื‘ื•ื™ืœื– ืึทืจืึธืคึผ ืฆื• ืขืคืŸ TSX ื˜ืจืึทื ื–ืึทืงืฉืึทื ื– ืื•ืŸ ืงืจื™ื™ื™ื˜ื™ื ื’ ื˜ื ืึธื™ื ืคึฟืึทืจ ื–ื™ื™ืขืจ ื™ื™ืกื™ื ื’ืงืจืึทื ืึทืก ื™ื‘ืขืจืจื™ื™ึทืก, ื‘ืขืฉืึทืก ื•ื•ืึธืก ื˜ื ืึธื™ื ืื•ื™ืคืฉื˜ื™ื™ืŸ ืคึฟืึทืจ ืœื™ืงื™ื ื’ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื™ื ืขืจืœืขืš ื‘ืึทืคืขืจื– ืกืคึผืขืงื•ืœืึทื˜ื™ื•ื•ืขืœื™ ืึธื ื’ืขืคื™ืœื˜ ืžื™ื˜ ื“ืึทื˜ืŸ ืคื•ืŸ ื–ื™ืงืึธืจืŸ ืœื™ื™ืขื ืขืŸ ืึทืคึผืขืจื™ื™ืฉืึทื ื– ื“ื•ืจื›ื’ืขืงืึธื›ื˜ ืื•ื™ืฃ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืงืคึผื• ื”ืึทืจืฅ. ื“ื™ ืจื™ื ืขืŸ ืื™ื– ืœื™ืžื™ื˜ืขื“ ืฆื• ื“ื™ ืงืจืึทื ื˜ ื’ืฉืžื™ื•ืช ืงืคึผื• ื”ืึทืจืฅ (ืื•ื™ืฃ ื•ื•ืึธืก ื“ื™ ืึทื˜ืึทืงืขืจ ืก ืงืึธื“ ืื™ื– ืคืœื™ืกื ื“ื™ืง), ืึธื‘ืขืจ ื–ื™ื ื˜ ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืึทืœ ื‘ืึทืคืขืจื– ื–ืขื ืขืŸ ืฉืขืจื“ ืฆื•ื•ื™ืฉืŸ ืคืึทืจืฉื™ื“ืขื ืข ืคึฟืขื“ืขื ืื™ืŸ ื”ื™ืคึผืขืจ-ื˜ืจืขื“ื™ื ื’ ืžืึธื“ืข, ืขืก ืื™ื– ืžืขื’ืœืขืš ืฆื• ืจื™ื ืขืŸ ื–ื›ึผืจื•ืŸ ืึทืคึผืขืจื™ื™ืฉืึทื ื– ื’ืขื˜ืืŸ ืื™ืŸ ืื ื“ืขืจืข ืงืคึผื• ืคึฟืขื“ืขื.

ื‘ืึทืคืึทืœืŸ ืื•ื ื˜ืขืจ ืฆื• ืขื˜ืœืขื›ืข ืžืึธื“ืขืœืก ืคื•ืŸ ื“ื™ ืึทื›ื˜, ื ื™ื™ื ื˜ืขืจ ืื•ืŸ ืฆืขื ื˜ ื“ื•ืจ ืคื•ืŸ ื™ื ื˜ืขืœ ืงืึธืจ ืคึผืจืึทืกืขืกืขืจื–, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื™ื ื˜ืขืœ ืคึผืขื ื˜ื™ื•ื ื’ืึธืœื“, ื™ื ื˜ืขืœ ืกืขืœืขืจืึธืŸ 5000, ื™ื ื˜ืขืœ ืงืกืขืึธืŸ E, ื™ื ื˜ืขืœ ืงืกืขืึธืŸ ื•ื• ืื•ืŸ ื“ื™ ืจื’ืข ื“ื•ืจ ื™ื ื˜ืขืœ ืงืกืขืึธืŸ ืกืงืึทืœืึทื‘ืœืข. ื ื™ื• ื™ื ื˜ืขืœ ืคึผืจืึทืกืขืกืขืจื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ืงืึทืกืงืึทื“ืข ืœื™ื™ืง ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืข ื‘ืึทืงืขื ืขื  ืื™ืŸ ืืคืจื™ืœ, ื•ื•ืึธืก ืื™ื– ื˜ื›ื™ืœืขืก ื ื™ืฉื˜ ืกืึทืกืขืคึผื˜ืึทื‘ืึทืœ ืฆื• RIDL ืื•ืŸ Fallout ืื ืคืืœืŸ, ื–ืขื ืขืŸ ืื•ื™ืš ืกืึทืกืขืคึผื˜ืึทื‘ืึทืœ ืฆื• ื‘ืึทืคืึทืœืŸ. ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• Zombieload 2.0, ืจื™ืกืขืจื˜ืฉืขืจื– ืื•ื™ืš ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื“ื™ ืžืขื’ืœืขื›ืงื™ื™ื˜ ืคื•ืŸ ื‘ื™ื™ืคึผืึทืกื™ื ื’ ืคืจื™ืขืจ ืคืืจื’ืขืœื™ื™ื’ื˜ ืžืขื˜ื”ืึธื“ืก ืคื•ืŸ ืฉื•ืฅ ืงืขื’ืŸ MDS ืื ืคืืœืŸ, ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ื“ื™ VERW ืœื™ืžืขื“ ืฆื• ื•ื™ืกืžืขืงืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืึทืœ ื‘ืึทืคืขืจื– ื•ื•ืขืŸ ืื™ืจ ืฆื•ืจื™ืงืงื•ืžืขืŸ ืคื•ืŸ ื“ื™ ืงืขืจืŸ ืฆื• ื‘ืึทื ื™ืฆืขืจ ืคึผืœืึทืฅ ืึธื“ืขืจ ื˜ืจืึทื ืกืคืขืจื™ื ื’ ืงืึธื ื˜ืจืึธืœ ืฆื•. ื“ื™ ื’ืึทืกื˜ ืกื™ืกื˜ืขื.

ื“ืขืจ ื™ื ื˜ืขืœ ื‘ืืจื™ื›ื˜ ื–ืื’ื˜ ืื– ืื™ืŸ ืกื™ืกื˜ืขืžืขืŸ ืžื™ื˜ ื ื›ืขื˜ืขืจื™ื’ืข ืœืืกื˜ ืื™ื– ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืื•ื™ืกืฆื•ืคื™ืจืŸ ืืŸ ืื˜ืืงืข ืฉื•ื•ืขืจ, ื•ื•ื™ื™ืœ ื ืจื™ื ืขืŸ ืคื•ืŸ ืžื™ืงืจืึธ-ืืจืฉื™ื˜ืขืงื˜ื•ืจืข ืกื˜ืจื•ืงื˜ื•ืจืŸ ื“ืขืงื˜ ืืœืข ืืงื˜ื™ื•ื•ื™ื˜ืขื˜ืŸ ืื™ื ืขื ืกื™ืกื˜ืขื ืื•ืŸ ื“ืขืจ ืื˜ืืงืขืจ ืงืขืŸ ื ื™ืฉื˜ ื‘ืืื™ื™ื ืคืœื•ืกืŸ ื“ืขื ืžืงื•ืจ ืคื•ืŸ ื“ื™ ืขืงืกื˜ืืงื˜ื™ืจื˜ืข ื“ืึทื˜ืŸ, ื“.ื”. ืงืขื ืขืŸ ื‘ืœื•ื™ื– ืึธื ืงืœื™ื™ึทื‘ืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืึธืก ื™ืžืขืจื“ื–ืฉื™ื– ื•ื•ื™ ืึท ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ืึท ืจื™ื ืขืŸ ืื•ืŸ ืคึผืจื•ื‘ื™ืจืŸ ืฆื• ื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจืŸ ื ื•ืฆื™ืง ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ืฆื•ื•ื™ืฉืŸ ื“ื™ ื“ืึทื˜ืŸ, ืึธืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืคึผืขืจืคึผืึทืกืคืึทืœื™ ื™ื ื˜ืขืจืกืขืคึผื˜ ื“ืึทื˜ืŸ ืคึฟืึทืจื‘ื•ื ื“ืŸ ืžื™ื˜ ืกืคึผืขืฆื™ืคื™ืฉ ื–ื™ืงืึธืจืŸ ื•ื•ืขื ื“ื˜. ืึธื‘ืขืจ, ืจื™ืกืขืจื˜ืฉืขืจื– ืืจื•ื™ืก ื ื•ืฆืŸ ืคึผืจืึธื•ื˜ืึทื˜ื™ื™ืคึผ, ืคืœื™ืกื ื“ื™ืง ืื•ื™ืฃ ืœื™ื ื•ืงืก ืื•ืŸ ื•ื•ื™ื ื“ืึธื•ื–, ืื•ืŸ ื“ืขืžืึทื ืกื˜ืจื™ื™ื˜ื™ื“ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื ื•ืฆืŸ ืึท ื‘ืึทืคืึทืœืŸ ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ื™ ื•ื•ืึธืจืฆืœ ื‘ืึทื ื™ืฆืขืจ ืก ืคึผืึทืจืึธืœ ื”ืึทืฉ.
ื˜ืึธืžืขืจ ื“ื•ืจื›ืคื™ืจืŸ ืึท ื‘ืึทืคืึทืœืŸ ืคื•ืŸ ืึท ื’ืึทืกื˜ ืกื™ืกื˜ืขื ืฆื• ืึธื ืงืœื™ื™ึทื‘ืŸ ื“ืึทื˜ืŸ ื•ื•ืึธืก ืื™ื– ืืจื•ื™ืก ืื™ืŸ ื“ื™ ืึทืคึผืขืจื™ื™ืฉืึทื ื– ืคื•ืŸ ืื ื“ืขืจืข ื’ืึทืกื˜ ืกื™ืกื˜ืขืžืขืŸ, ื“ื™ ื‘ืึทืœืขื‘ืึธืก ืกื•ื•ื™ื•ื•ืข, ื“ื™ ื›ื™ื™ืคึผืขืจื•ื•ื™ื™ื–ืขืจ ืื•ืŸ Intel SGX ืขื ืงืœืึทื•ื•ืขืก.

ืคื™ืงืกื™ื– ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ ืงืึธื“ืขื‘ืึทืกืข ืื•ืŸ ื™ื ืงืœื•ื“ืขื“ ืื™ืŸ ืจื™ืœื™ืกื™ื– 5.3.11, 4.19.84, 4.14.154, 4.9.201 ืื•ืŸ 4.4.201. ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืคื•ืŸ ืงืขืจื ืขืœ ืื•ืŸ ืžื™ืงืจืึธืงืึธื“ืข ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ืจืขืœืขืึทืกืขื“ ืคึฟืึทืจ ื”ื•ื™ืคึผื˜ ื“ื™ืกื˜ืจื™ื‘ื™ื•ืฉืึทื ื– (ื“ืขื‘ื™ืึทืŸ, SUSE/openSUSE, ื•ื‘ื•ื ื˜ื•, rhel, ืคืขื“ืึธืจืึท, FreeBSD). ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขื•ื•ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ ืืคืจื™ืœ ืื•ืŸ ืึท ืคืึทืจืจื™ื›ื˜ืŸ ืื™ื– ืงืึธื•ืึธืจื“ืึทื ื™ื™ื˜ื™ื“ ืฆื•ื•ื™ืฉืŸ ื™ื ื˜ืขืœ ืื•ืŸ ื“ื™ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขื ื“ืขื•ื•ืขืœืึธืคึผืขืจืก.

ื“ื™ ืกื™ืžืคึผืœืึทืกื˜ ืื•ืคึฟืŸ ืคื•ืŸ ื‘ืœืึทืงื™ื ื’ Zombieload 2.0 ืื™ื– ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ TSX ืฉื˜ื™ืฆืŸ ืื™ืŸ ื“ื™ ืงืคึผื•. ื“ื™ ืคืืจื’ืขืœื™ื™ื’ื˜ ืคืึทืจืจื™ื›ื˜ืŸ ืคึฟืึทืจ ื“ื™ ืœื™ื ื•ืงืก ืงืขืจืŸ ื›ื•ืœืœ ืขื˜ืœืขื›ืข ืฉื•ืฅ ืึธืคึผืฆื™ืขืก. ื“ืขืจ ืขืจืฉื˜ืขืจ ืึธืคึผืฆื™ืข ืึธืคืคืขืจืก ื“ื™ ืคึผืึทืจืึทืžืขื˜ืขืจ "ืฆืงืก = ืื•ื™ืฃ / ืึทื•ื•ืขืง / ืึทื•ื˜ืึธ", ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืฆื™ ื“ื™ TSX ืคืึทืจืœืขื ื’ืขืจื•ื ื’ ืื™ื– ืขื ื™ื™ื‘ืึทืœื“ ืื•ื™ืฃ ื“ื™ ืงืคึผื• (ื“ื™ ื•ื•ืขืจื˜ ืึทื•ื˜ืึธ ื“ื™ืกื™ื™ื‘ืึทืœื– TSX ื‘ืœื•ื™ื– ืคึฟืึทืจ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ืงืคึผื•ืก). ื“ื™ ืจื’ืข ืฉื•ืฅ ืึธืคึผืฆื™ืข ืื™ื– ืขื ื™ื™ื‘ืึทืœื“ ื“ื•ืจืš ื“ื™ "tsx_async_abort=off/full/full,nosmt" ืคึผืึทืจืึทืžืขื˜ืขืจ ืื•ืŸ ืื™ื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ืงืœื™ืจื™ื ื’ ืžื™ืงืจืึธืึทืจื˜ืฉื™ื˜ืขืงื˜ื•ืจืึทืœ ื‘ืึทืคืขืจื– ื‘ืขืฉืึทืก ืงืึธื ื˜ืขืงืกื˜ ืกื•ื•ื™ื˜ืฉื™ื ื’ (ื“ื™ ื ืึธืกืžื˜ ืคืึธืŸ ืึทื“ื™ืฉื ืึทืœื™ ื“ื™ืกื™ื™ื‘ืึทืœ ืกืžื˜ / ื”ื™ืคึผืขืจ-ืคึฟืขื“ืขื). ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืฆื™ ืึท ืกื™ืกื˜ืขื ืื™ื– ืกืึทืกืขืคึผื˜ืึทื‘ืึทืœ ืฆื• ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–, sysfs ื’ื™ื˜ ื“ื™ "/sys/devices/system/cpu/vulnerabilities/tsx_async_abort" ืคึผืึทืจืึทืžืขื˜ืขืจ.

ืื•ื™ืš ืื™ืŸ ืึทืคึผื“ื™ื™ื˜ื™ื ื’ ืžื™ืงืจืึธืงืึธื“ืข ื™ืœื™ืžืึทื ื™ื™ื˜ืึทื“ ื ืื ื“ืขืจืข ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2018-12207) ืื™ืŸ ื™ื ื˜ืขืœ ืคึผืจืึทืกืขืกืขืจื–, ื•ื•ืึธืก ืื™ื– ืื•ื™ืš ืืคื’ืขืฉื˜ืขืœื˜ ืื™ืŸ ื“ื™ ืœืขืฆื˜ืข ืึทืคึผื“ื™ื™ื˜ื™ื ื’ ืœื™ื ื•ืงืก ืงืขืจื ืึทืœื–. ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืขืก ืึทืœืึทื•ื– ืึทืŸ ืึทื ืคึผืจื™ื•ื•ื™ืœืขื“ื–ืฉื“ ืึทื˜ืึทืงืขืจ ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ืึท ืึธืคึผืœื™ื™ืงืขื ื•ื ื’ ืคื•ืŸ ื“ื™ื ืกื˜, ื•ื•ืึธืก ื’ืขืคึฟื™ืจื˜ ื“ื™ ืกื™ืกื˜ืขื ืฆื• ื”ืขื ื’ืขืŸ ืื™ืŸ ื“ื™ "ืžืึทืฉื™ืŸ ื˜ืฉืขืง ื˜ืขื•ืช" ืฉื˜ืึทื˜.
ื‘ืึทืคืึทืœืŸ ื›ื•ืœืœ ืงืขืŸ ื–ื™ื™ืŸ ื‘ืื’ืื ื’ืขืŸ ืคื•ืŸ ื“ื™ ื’ืึทืกื˜ ืกื™ืกื˜ืขื.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’