It seems that only the Spectre vulnerability affects AMD and ARM. I don't know if the the kernel page table isolation patch also fixes this or it is solved in some other way.
Announcement
Collapse
No announcement yet.
Google Makes Disclosure About The CPU Vulnerability Affecting Intel / AMD / ARM
Collapse
X
-
According to this, https://spectreattack.com/spectre.pdf, the KAISER patch doesn't protect against Spectre vulnerability, which is the one that affects ARM and AMD. That paper proposes some mitigation strategies, but the only way to protect against this is to halt speculative execution.Last edited by newwen; 03 January 2018, 07:36 PM.
- Likes 3
Comment
-
Originally posted by ramrod View PostLooks like there are two Vulnerabilities, but only Meltdown(Intel only) allows access to system memory. Spector just looks like it allows applications to access other application memory, and should be fixed by individual apps.
Edit: Actually it looks like Zen is not affected by any of them.
https://googleprojectzero.blogspot.com/
Good one!
- Likes 7
Comment
-
Originally posted by dungeon View PostYeah, this needs to be quoted:
Question is: does our PTI protect only from Meltdown, but not Spectre or both? Spectre sounds like separate issue really, which goes potentionaly & countinuosly further beyond in future
- Likes 3
Comment
-
OK, i have readed more here https://spectreattack.com/spectre.pdf
Unlike Meltdown, the Spectre attack works on non-Intel processors, including AMD and ARM processors. Furthermore the KAISER patch, which has been widely applied as a mitigation to Meltdown attack, does not protect against Spectre.Last edited by dungeon; 03 January 2018, 08:04 PM.
- Likes 4
Comment
-
Michael your posts are starting to seem suspicious. Google did not say AMD is affected by the same problem that the KPTI patch addresses. Your latest headlines over the past 8 hours are starting to read like a large entity is providing extra donations.
I'm not accusing... this just doesn't pass the sniff test.
- Likes 4
Comment
-
Originally posted by metalliax View PostMichael your posts are starting to seem suspicious. Google did not say AMD is affected by the same problem that the KPTI patch addresses. Your latest headlines over the past 8 hours are starting to read like a large entity is providing extra donations.
I'm not accusing... this just doesn't pass the sniff test.
I'm not accusing...just saying it seems like some 3 letter entity that has trouble posting a profit for more than a quarter at a time may have some extra staff out there spreading FUD.
- Likes 1
Comment
Comment