A new ‘Zombieload’ flaw hits Intel’s newest Cascade Lake chips

Discussion in 'Frontpage news' started by anticupidon, Nov 12, 2019.

  1. anticupidon

    anticupidon Ancient Guru

    Messages:
    4,166
    Likes Received:
    873
    GPU:
    Vega/Navi
    "The Zombieload vulnerability disclosed earlier this year in May has a second variant that also works against more recent Intel processors, not just older ones, including Cascade Lake, Intel's latest line of high-end CPUs -- initially thought to have been unaffected."

    https://www.guru3d.com/news-story/n...-flaw-hits-intel-cascade-lake-processors.html

    https://techcrunch.com/2019/11/12/intel-cascade-lake-zombieload/

    https://www.theregister.co.uk/2019/11/12/zombieload_cpu_attack/

    https://www.zdnet.com/article/intels-cascade-lake-cpus-impacted-by-new-zombieload-v2-attack/

    Well, Intel made it back to square one.

    But, wait, there is more:

    " But bad news never comes alone. The same research team who found Zombieload v1 and v2, also found an issue with Intel's original patches for the four MDS attacks disclosed in May."

    If you want to learn more, here is a technical document about this type of atack

    https://zombieloadattack.com/zombieload.pdf

    And more in-depth stuff from RedHat, because of Linux servers.

    https://access.redhat.com/solutions/tsx-asynchronousabort

    What do you guys think about this ?
     
    BetA likes this.
  2. anticupidon

    anticupidon Ancient Guru

    Messages:
    4,166
    Likes Received:
    873
    GPU:
    Vega/Navi
    Already patches are available in the Linux kernel, patches are applied in production servers. Can't say diddle about Windows, maybe there are updates coming in the mainstream updates.
    Patch is also available for rolling distros, already patched my I7 Thinkpad running Arch.
    Will run some Phoronix tests , to see how impacts performance, if at all.
     
  3. RzrTrek

    RzrTrek Ancient Guru

    Messages:
    2,352
    Likes Received:
    632
    GPU:
    RX 580 ❤ MESA 19.2
    Another interesting read by Red Hat, thanks for sharing. Also the Intel comments over at Phoronix are hilarious.
     
    K.S. and yasamoka like this.
  4. K.S.

    K.S. Ancient Guru

    Messages:
    1,912
    Likes Received:
    475
    GPU:
    RTX 2080 GAMING OC
    Tell me about it...

    one member, "I have a better fix.
    I will disable my Intel CPU altogether."


     
    HitokiriX, Alessio1989 and yasamoka like this.

  5. sverek

    sverek Ancient Guru

    Messages:
    5,438
    Likes Received:
    2,301
    GPU:
    NOVIDIA -0.5GB
    such UI, much skills. mmmmmmmmm 100% 1337 hAx0r.
     
  6. user1

    user1 Maha Guru

    Messages:
    1,441
    Likes Received:
    472
    GPU:
    hd 6870
    looks pretty bad, apparently this one works even if smt is disabled
    that and there is another unrelated bug(JCC) on skylake and newer, that needs a microcode patch, and has a nasty performance hit aswell, upto a 4% performance hit just from that alone,requires applications to be recompiled to mitigate the performance hit...
    ouch
     
    K.S. likes this.
  7. K.S.

    K.S. Ancient Guru

    Messages:
    1,912
    Likes Received:
    475
    GPU:
    RTX 2080 GAMING OC
    Thanks brah' imtsoo cool yeh'
     
  8. user1

    user1 Maha Guru

    Messages:
    1,441
    Likes Received:
    472
    GPU:
    hd 6870
  9. K.S.

    K.S. Ancient Guru

    Messages:
    1,912
    Likes Received:
    475
    GPU:
    RTX 2080 GAMING OC
    Been reading through that tonight, man. I hope Intel is working on something parallel to these Lake-refreshes they keep releasing up unto 2021 with Tiger-lake. They need to take it back to formula.
     
  10. fantaskarsef

    fantaskarsef Ancient Guru

    Messages:
    11,032
    Likes Received:
    3,132
    GPU:
    2080Ti @h2o
    [​IMG]


    only leads to

     
    Alessio1989, DeskStar, K.S. and 2 others like this.

  11. Angushades

    Angushades Master Guru

    Messages:
    206
    Likes Received:
    30
    GPU:
    Gigabyte 2080 OC
    Why? It's not fun to kick a man when there down. I personally feel sorry for intel I don't want AMD to rain king, I want even competition. Does anyone remembers when AMD's FX62 cost like 1K yea no different to intel extreme CPUs.
     
  12. fantaskarsef

    fantaskarsef Ancient Guru

    Messages:
    11,032
    Likes Received:
    3,132
    GPU:
    2080Ti @h2o
    I think you have the wrong perspective here:

    Intel's far from down. They have billions of USD still in their war chest to battle AMD's offerings... not via better tech, but via marketing, OEM contracts and many things we probably don't even know.
    So they are still sitting on their high horse... they're just being sprayed with dirt. They have not invested those $ 3 billion in new fabs, more R&D, or speeding up any advancements... they are just blocking their competition. Which has been on the ground for years, kicking them. So they are doing just exactly what you don't like. Serves them right to taste their own medicine, imho.

    And, to be fair, ultimately you want competition, we all want to, which can only end up with somebody being on top. The question is, do you want it to be because of better tech or better marketing / business plans?
     
    Solfaur and Embra like this.
  13. RooiKreef

    RooiKreef Master Guru

    Messages:
    371
    Likes Received:
    41
    GPU:
    Vega 56 Red Devil
    Isn't this the new Intel chips with the new hardware security layer build in to prevent these kind of attacks? Intel just can't get a break from all these vulnerabilities.
     
  14. anticupidon

    anticupidon Ancient Guru

    Messages:
    4,166
    Likes Received:
    873
    GPU:
    Vega/Navi
    Sadly, yes.
    I didn't post this to bash Intel, this affects everyone.
    And we should learn something from it.
     
    Embra, fantaskarsef and user1 like this.
  15. user1

    user1 Maha Guru

    Messages:
    1,441
    Likes Received:
    472
    GPU:
    hd 6870
    Seems pretty resonable to me to update benchmark data when it is no longer accurately reflecting the product.
    Normally this type of thing would make little difference, 1-2% isnt a big deal, but this time is significant, one of the tested titles in the phoronic article loses 8%, and is accompanied with worst of all , frame time spikes in several titles. If I was in the market for a "gaming" cpu i would certainly like to know the extent of the issue before making a purchase.
     
    carnivore, Embra and fantaskarsef like this.

  16. sverek

    sverek Ancient Guru

    Messages:
    5,438
    Likes Received:
    2,301
    GPU:
    NOVIDIA -0.5GB
    Shintel bad, AyyMD gut.
     
    airbud7 and fantaskarsef like this.
  17. mackintosh

    mackintosh Master Guru

    Messages:
    237
    Likes Received:
    51
    GPU:
    MSI GTX 1080 Armor
    Make your next CPU an AMD? That's my only takeaway from this so far.
     
    fantaskarsef likes this.
  18. Angushades

    Angushades Master Guru

    Messages:
    206
    Likes Received:
    30
    GPU:
    Gigabyte 2080 OC
    Good points and yea off course better tech.
     
    fantaskarsef likes this.
  19. mbk1969

    mbk1969 Ancient Guru

    Messages:
    8,188
    Likes Received:
    4,980
    GPU:
    GeForce GTX 1070
    I still don`t care. My home and work rigs (with Intel inside) work just fine for my needs.
     
    airbud7 likes this.
  20. Picolete

    Picolete Master Guru

    Messages:
    277
    Likes Received:
    68
    GPU:
    R9 290 Sapphire Tri-x
    Another month, another hole in Intel Swiss cheese inside
     
    Akumu and Solfaur like this.

Share This Page