New CPU Vulnerability, Speculative Store Bypass (Variant 4)

[engine]

A new CPU flaw has been disclosed, dubbed Speculative Store Bypass (variant 4), which is similar to Meltdown and Spectre flaws. Most major operating system and hypervisors will add support for Speculative Store Bypass Disable (SSBD), and some are already under way.

[us-cert.gov...]

[intel.com...]

Intel has released Beta microcode updates to operating system vendors, equipment manufacturers, and other ecosystem partners adding support for Speculative Store Bypass Disable (SSBD).

The key to note is to check your OS processor and then, update, as required.

[keyplyr]

So many vulnerabilities, so little time :(

[graeme_p]

CPU designs are too complex. I would rather have simpler designs that were slower, but secure. I said this at when the last lot were found, and it is the inevitable result of sacrificing everything for performance.

[engine]

For the record, here's a link to the previous similar vulnerabilities. CPU Vulnerabilities Named Meltdown and Spectre [webmasterworld.com]