CVE-2019-1125 "SWAPGS" Is The Newest Spectre Vulnerability

[phoronix]

Phoronix: CVE-2019-1125 "SWAPGS" Is The Newest Spectre Vulnerability

CVE-2019-1125 was made public today or also referred to as the "SWAPGS" vulnerability as a new variant of Spectre V1 affecting Windows and Linux and both AMD and Intel x86_64 processors...

http://www.phoronix.com/scan.php?page=news_item&px=CVE-2019-1125-SWAPGS

[tildearrow]

More like the newest processor slowdown update.

[cl333r]

A few more of these and ARM chips will catch up with Intel speed wise.

[ryao]

A few more of these and ARM chips will catch up with Intel speed wise.

If I read this correctly, they are just adding a couple of load fences:

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=18ec54fdd6d18d92025af097cd042a75cf0ea24c

https://www.felixcloutier.com/x86/lfence

Those are cheap. Atomic instructions cost more. The impact of this should be minimal.

[dungeon]

He, he, one another of these known but hidden from the public... and more to come

Assigned (20181126)

Boring

[ThoreauHD]

What's 70% of 5 Ghz again? 9900k users want to know.

[dungeon]

A few more of these and ARM chips will catch up with Intel speed wise.

Yeah, start overclocking your Pi and see how far you can get

[chithanh]

and according to mixed information, AMD

What is the mixed information? In the kernel patch it directly says that

On AMD, this variant isn't possible because swapgs is serializing with respect to future GS-based accesses.

So how can you speculate beyond that?

On another note, it turned out to be a good thing for one more reason that the Intel FSGSBASE support patches were rejected...

https://www.phoronix.com/scan.php?page=news_item&px=Linux-FSGSBASE-Reverted

[dungeon]

So how can you speculate beyond that?

Well, AMD is not affected by meltdown, l1tf and mds. But by spectre in general it potentionally is.

Now Zen 2 have fixed some of the spectres, so it is more unclear in that spectre if or which are and which are not

If they speak about AMD in general there, then yeah not affected

[RussianNeuroMancer]

Yeah, start overclocking your Pi and see how far you can get

Should I overclock my Snapdragon 850? It's seems like 850 is overclocked version 835.