Intel iGPU Vulnerability (Gen7/7.5/9) : CVE-2019-14615

Discussion in 'Frontpage news' started by Evildead666, Jan 16, 2020.

  1. Evildead666

    Evildead666 Maha Guru

    Messages:
    1,281
    Likes Received:
    265
    GPU:
    Vega64/EKWB/Noctua
    https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00314.html

    Apparently there has been a new vulnerability discovered in Intel integrated GPU's.
    Namely the Gen 7/7.5 and Gen 9 GPUs.
    (Gen7/7.5 is Ivy Bridge and Haswell, and 9th Gen is 9900 series).
    8th gen is not concerned by this (Broadwell), as it has different hardware, and it is not affected.

    Phoronix has been doing some testing under Linux, to see the impact of the mitigations, and some cases the GPU performance is cut in half or more !!!

    Wonder if its the same case in Windows ?

    https://www.phoronix.com/scan.php?page=article&item=intel-gen7-hit&num=1
     
  2. Alessio1989

    Alessio1989 Maha Guru

    Messages:
    1,478
    Likes Received:
    254
    GPU:
    .
    The new driver update for gen 7.5 fixing this CVE is garbage, it breaks some basics DXGI API calls.
     
  3. Loophole35

    Loophole35 Ancient Guru

    Messages:
    9,505
    Likes Received:
    957
    GPU:
    EVGA 1080ti SC
    9900kf so no worries here. At least this one wont cause a performance loss for me.
     
    airbud7 likes this.
  4. Evildead666

    Evildead666 Maha Guru

    Messages:
    1,281
    Likes Received:
    265
    GPU:
    Vega64/EKWB/Noctua

  5. The Goose

    The Goose Ancient Guru

    Messages:
    2,311
    Likes Received:
    49
    GPU:
    MSIrtx2080 superXS
    "A flaw was found that allowed an attacker to view the state of on GPU execution unit created by another user on the same system.", by the look of it the attacker has to be local and drivers have to be install for the attack to be posible, who uses the igpu in 2020, well i dont know anyone that 1) has the knowledge to perform a local attack, 2) im the only user of my system, 3) i wouldn't be stupid enough to do this to myself so i quess im safe.
     
  6. Evildead666

    Evildead666 Maha Guru

    Messages:
    1,281
    Likes Received:
    265
    GPU:
    Vega64/EKWB/Noctua
    They're still not entirely sure whether WebGL could be a vector, or not.
    Still waiting for more information from Intel it seems.
     
  7. Evildead666

    Evildead666 Maha Guru

    Messages:
    1,281
    Likes Received:
    265
    GPU:
    Vega64/EKWB/Noctua
    Thanks to Michael Larabel at Phoronix, we have some more info.

    From this link to information about the mitigation : https://lists.freedesktop.org/archives/dri-devel/2020-January/252142.html

    This disclaimer is now at the top :
    So, with the final mitigations, there might not be any performance impact at all.
    It may be that Intel had been prioritizing the 9th gen GPU's first, because a lot more of them would be around right now than 7th Gen.
     
  8. TheDeeGee

    TheDeeGee Ancient Guru

    Messages:
    6,329
    Likes Received:
    718
    GPU:
    MSI GTX 1070
    Got my iGPU disabled since i got my 4770K back in 2013.
     
    EtherPhoenix likes this.
  9. tsunami231

    tsunami231 Ancient Guru

    Messages:
    9,925
    Likes Received:
    417
    GPU:
    EVGA 1070Ti Black
    ever since the meltdown "blow up" done by social media and everything else, it been security flaw this security flaw that. it like there trying to scare the public into either "updating there hardware or the software" if true or not that is the effect it having except on wrong people most people still know Squat about all these thing and never will. I really just stopped paying attention to all this news.

    my iGPU has been disable on ever cpu I ever had that had one. only time it ever goes on is if I need to RMA my gpu and I have no spare one lying around to use
     
    airbud7 likes this.
  10. Rich_Guy

    Rich_Guy Ancient Guru

    Messages:
    12,369
    Likes Received:
    487
    GPU:
    MSI 2070S X-Trio
    First their CPUs, now their iGPUs :p
     

  11. XP-200

    XP-200 Ancient Guru

    Messages:
    5,079
    Likes Received:
    727
    GPU:
    Zotac GTX 1080 Mini
    Yeap, same here, never used it and it was disabled from day 1, but has it been that long since i bought it, this has been the longest i have ever stuck with the same cpu, same with the mobo and memory, all bought to go with the i7 4770, so i will give it its due, it does what it said on the tin, flaws and exploits not withstanding. Lol
     
  12. RavenMaster

    RavenMaster Maha Guru

    Messages:
    1,102
    Likes Received:
    103
    GPU:
    1x RTX 2080Ti FE
    You don't suppose there's a war going on between Intel and AMD that runs much deeper than pricing do you?

    Think back to Spectre and Meltdown. Now this...

    Has it ever occurred to anyone that Intel may have created the Meltdown vulnerability to undermine their competition and AMD may have created the Spectre vulnerability counter-attack Intel?
     
  13. tsunami231

    tsunami231 Ancient Guru

    Messages:
    9,925
    Likes Received:
    417
    GPU:
    EVGA 1070Ti Black
    why would intel create a vulnerability they are subject too? I mean other then to get people to buy new hardware..
     
    HitokiriX likes this.
  14. Fox2232

    Fox2232 Ancient Guru

    Messages:
    9,938
    Likes Received:
    2,289
    GPU:
    5700XT+AW@240Hz
    Laptops.
    1) dumb assumption
    2) are you in control of every single process using GPU?
    3) Actually, your 1st point says that you are not smart enough to do it to anyone.

    Side note: Learn to start and end sentences.
     
  15. Astyanax

    Astyanax Ancient Guru

    Messages:
    4,697
    Likes Received:
    1,395
    GPU:
    GTX 1080ti
    No, because that's just not how any of this works.
     

  16. Yxskaft

    Yxskaft Maha Guru

    Messages:
    1,402
    Likes Received:
    88
    GPU:
    GTX Titan Sli
    Ouch, that's freaking horrible for those users. There are tons of good old games that are playable on the IGPUs. Simple games like newer sidescrollers should also work.

    Intel's Linux drivers even support Vulkan on Ivy Bridge.
     
  17. Evildead666

    Evildead666 Maha Guru

    Messages:
    1,281
    Likes Received:
    265
    GPU:
    Vega64/EKWB/Noctua

Share This Page