{"id":2384,"date":"2018-11-05T15:36:22","date_gmt":"2018-11-05T04:36:22","guid":{"rendered":"https:\/\/techsuccess.com.au\/?p=2384"},"modified":"2018-11-06T12:29:19","modified_gmt":"2018-11-06T01:29:19","slug":"new-intel-cpu-flaw-leaves-millions-vulnerable","status":"publish","type":"post","link":"https:\/\/techsuccess.com.au\/new-intel-cpu-flaw-leaves-millions-vulnerable\/","title":{"rendered":"New Intel CPU Flaw Leaves Millions Vulnerable"},"content":{"rendered":"

Security researches have found a new Intel CPU flaw that exploits\u00a0Hyper-Threading to steal encrypted data which can allow hackers access to sensitive protected data, like cryptographic keys, passwords, from all other processes running in the same CPU core with simultaneous multi-threading\u00a0feature enabled. Throughout this article, we will release the details of the flaw and show latest regarding patching and Intel’s response.<\/strong><\/p>\n

Dubbed\u00a0PortSmash<\/strong> (CVE-2018-5407),\u00a0PortSmash<\/strong> is a vulnerability discovered by security researches from the Tampere University of Technology in Finland and Technical University of Havana, Cuba, the new side-channel vulnerability resides in Intel’s Hyper-Threading technology, the company’s implementation of Simultaneous MultiThrading\u00a0(SMT).<\/p>\n

What is MultiThreading?<\/h3>\n
\n

Simultaneous Multithreading<\/strong> is a type of execution model that allows multiple threads to exist within the context of a process such that they execute independently but share their process resources. A thread maintains a list of information relevant to its execution including the priority schedule, exception handlers, a set of CPU registers, and stack state in the address space of its hosting process. As published<\/a><\/span> on to Techopdie<\/p>\n

Since SMT runs two threads in two independent processes alongside each other in the same physical core to boost performance, it is possible for one process to see a surprising amount of what the other is doing and this is where the vulnerability can be exploited.<\/p>\n

“We recently discovered a new CPU microarchitecture attack vector. The nature of the leakage is due to execution engine sharing on SMT (e.g., Hyper-Threading) architectures,” the team\u00a0says<\/a>.<\/p>\n

“More specifically, we detect port contention to construct a timing side channel to exfiltrate information from processes running in parallel on the same physical core.”<\/p><\/blockquote>\n<\/div>\n

 <\/p>\n

\n