TONTOU: Linux Kernel Leak via Timer Interrupt Stealing After Spectre v2 Defense

Researchers found a way to bypass recent mitigations for Spectre v2 speculative execution side-channel attacks and developed an exploit to leak secrets from Linux machines. [...]

An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the

A group of academics from VUSec and Scuola Superiore Sant'Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT) engines present in

<h2> The Problem </h2> <p>When a kernel heap overflow occurs, attackers can chain into arbitrary code execution. Recent research confirms that heap corruption remains a critical

A new Branch Target Reuse (BTR) attack has been devised that can recover root password hashes on Intel computers running Linux in 3-5 minutes on average. [...]

<h2> TL;DR </h2> <ul> <li>A Patch Tuesday release is the single monthly batch in which Microsoft publishes security fixes for Windows, Office, Exchange Server and its server