Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign

Discussion in 'Frontpage news' started by zero_cool, Jan 2, 2018.

  1. H83

    H83 Ancient Guru

    Messages:
    3,374
    Likes Received:
    773
    GPU:
    MSI Duke GTX1080Ti
    It´s true that every CPU ships with small bugs but we are not talking about a small one, we are talking about a gigantic critical flaw in the CPU!!!... Bugs like this shouldn´t happen...

    As for you biggest question, i find it hard to believe that Intel didn´t know about this issue months ago or even more... They probably tried to keep it under wraps while trying to solve the issue in house but they failed and others noticed it and Intel had not option but to admit it...
     
  2. chispy

    chispy Ancient Guru

    Messages:
    8,932
    Likes Received:
    1,135
    GPU:
    RX 6900xt / RTX3090
    Turanis, Jackalito and user1 like this.
  3. tsunami231

    tsunami231 Ancient Guru

    Messages:
    11,332
    Likes Received:
    761
    GPU:
    EVGA 1070Ti Black
    what are these "Specific" workloads? I use VM from time to time to "test" windows builds from time to time before I put them on my machines and when I i testing i dont want done on my actual system. so the malware or chance of virus stays on the VM.

    beyond that my system is only used for gaming and web surfing
     
    Last edited: Jan 4, 2018
  4. H83

    H83 Ancient Guru

    Messages:
    3,374
    Likes Received:
    773
    GPU:
    MSI Duke GTX1080Ti
    Jackalito likes this.

  5. chispy

    chispy Ancient Guru

    Messages:
    8,932
    Likes Received:
    1,135
    GPU:
    RX 6900xt / RTX3090
    Jackalito likes this.
  6. user1

    user1 Ancient Guru

    Messages:
    1,620
    Likes Received:
    549
    GPU:
    hd 6870
    from the new details available , it would seem that even if the malicious code was running in a vm, it would be able to read higher privileged memory , that may contain data like passwords stored in other programs, or even programs running on the host machine outside the vm



    doesn't appear to be able to write or execute , but still a serious security problem, what the patch in this case does is keep privileged data from being leaked through the tlb cache, by causing it to flush it every time something privileged is being called.( roughtly along those lines, haven't read into it too much) which is why there is a performance hit.

    disk I/O perf seems to be the most impacted by this patch/workaround, probably wont be much of an issue unless you paid for fancy nvme drives, in which case you'll probably lose quite a bit of throughput.
     
    Last edited: Jan 4, 2018
  7. D3M1G0D

    D3M1G0D Ancient Guru

    Messages:
    2,068
    Likes Received:
    1,340
    GPU:
    2 x GeForce 1080 Ti
    Interesting reads. Meltdown is truly scary (can read from kernel memory, including passwords) but is easier to mitigate, while Spectre is far more benign (can only leak data from a target application which the CPU has been trained to mispredict) but is difficult to counter. Both are kind of worrying, but I would say meltdown is by far the more dangerous exploit.
     
  8. jaggerwild

    jaggerwild Master Guru

    Messages:
    783
    Likes Received:
    282
    GPU:
    EVGA RTX 2070 SUP
    I'd like to ask the question, does this affect IGPU users more or less or don't we know yet? I must say, GURU users are more mature and most here have a level head about this whole issue. More so then other site's i visit which seem to have a "SKY is falling" mentality.
     
  9. chispy

    chispy Ancient Guru

    Messages:
    8,932
    Likes Received:
    1,135
    GPU:
    RX 6900xt / RTX3090
    AsiJu, Jackalito and HitokiriX like this.
  10. jaggerwild

    jaggerwild Master Guru

    Messages:
    783
    Likes Received:
    282
    GPU:
    EVGA RTX 2070 SUP
    chispy likes this.

  11. tsunami231

    tsunami231 Ancient Guru

    Messages:
    11,332
    Likes Received:
    761
    GPU:
    EVGA 1070Ti Black
    I am not building a new rig to to patch this maybe will get lucky and FW updates on MB that will patchs this? and aviod the hit?
     
  12. chispy

    chispy Ancient Guru

    Messages:
    8,932
    Likes Received:
    1,135
    GPU:
    RX 6900xt / RTX3090
    Yeah i do once in a while :) .



    More emerging news:


    According to the researchers, including security experts at Google and various academic institutions, the Meltdown flaw affects virtually every microprocessor made by Intel, which makes chips used in more than 90 percent of the computer servers that underpin the internet and private business operations...

    Source: https://www.nytimes.com/2018/01/03/business/computer-flaws.html
     
    Jackalito likes this.
  13. sverek

    sverek Ancient Guru

    Messages:
    6,074
    Likes Received:
    2,952
    GPU:
    NOVIDIA -0.5GB
    Since this issue was known from summer and been reported to Intel, was Coffee Lake released without patching it?
    Guess this issue requires major CPU redesign to fix it.

    If Ryzen+ manages to patch Spectre, that would be even bigger plus for AMD.
     
    HonoredShadow and chispy like this.
  14. D3M1G0D

    D3M1G0D Ancient Guru

    Messages:
    2,068
    Likes Received:
    1,340
    GPU:
    2 x GeForce 1080 Ti
    I find it funny how Intel is deliberately trying to blur the lines, making it seem like other CPU manufacturers have the same vulnerabilities. It's obvious that only Intel CPUs are susceptible to the potentially catastrophic Meltdown exploit, but they are trying to conflate it with the far less dangerous Spectre exploit, which exists on AMD and ARM as well.

    Nice try, but no cigar.

    As a professional computer programmer, I will lose no sleep over Spectre (its use case is so limited and specific that I can't imagine it would pose any danger in real-life scenarios). I'm absolutely terrified of Meltdown though, and will apply the patch as soon as it's available.
     
  15. jaggerwild

    jaggerwild Master Guru

    Messages:
    783
    Likes Received:
    282
    GPU:
    EVGA RTX 2070 SUP
    Umm, I'm no programmer(by any means)!!!
    But the fix will probably come in the form of a windows update, hence why it will affect all CPU'S that are windows updated.
     
    chispy likes this.

  16. chispy

    chispy Ancient Guru

    Messages:
    8,932
    Likes Received:
    1,135
    GPU:
    RX 6900xt / RTX3090
    Exactly this^^ , agree 100% with your statement.

    Also just now google project zero just posted new information and it does not looks good at all :/ , Intel knew about this since June 1 , 2017. " We reported this issue to Intel, AMD and ARM on 2017-06-01 " ...

    Link: https://googleprojectzero.blogspot.co.uk/2018/01/reading-privileged-memory-with-side.html

    Edit: more and more news emerging by the minute , this time Microsoft is responding with an emergency windows update(KB4056892 update) expected to roll out today at 5:00pm. Panic mode is ON !

    https://www.onmsft.com/news/microso...cessor-exploits-now-rolling-out-emergency-fix

    and : https://www.windowscentral.com/microsoft-pushing-out-emergency-fix-newly-disclosed-processor-exploit

    "" the security update is set to automatically roll out to all Windows 10 desktops today starting at 5 PM ET, and later to other Windows 7 and Windows 8 on January 16th ""

    That's 13 more days of vulnerabilities for windows 7 and windows 8.
     
    Last edited: Jan 4, 2018
  17. Athlonite

    Athlonite Maha Guru

    Messages:
    1,313
    Likes Received:
    36
    GPU:
    Pulse RX5700 8GB
    This is what happens when all you do is go for all out performance and you start cutting corners to get it
     
    AsiJu and chispy like this.
  18. swISS

    swISS Master Guru

    Messages:
    395
    Likes Received:
    6
    GPU:
    Nvidia GTX980 Ti
    Last edited: Jan 4, 2018
    chispy likes this.
  19. chispy

    chispy Ancient Guru

    Messages:
    8,932
    Likes Received:
    1,135
    GPU:
    RX 6900xt / RTX3090
    Welp , there is another patch freshly baked also for Windows and it has been just posted now at Microsoft Update catalog as a critical update ( KB4058702 ) it is so new and fresh out of the oven it does not have any description n/a and posted January 4, 2018. I do not know how many Windows patches , critical updates , windows security updates we will get as it seems they still working on them currently at this time ...

    https://www.catalog.update.microsoft.com/Search.aspx?q=kb4058702

    @swISS i'm not sure at this moment there are a whole bunch of critical updates appearing now. Let's wait a bit more to see what Microsoft recommends.
     
    swISS likes this.
  20. swISS

    swISS Master Guru

    Messages:
    395
    Likes Received:
    6
    GPU:
    Nvidia GTX980 Ti
    Looks like they were pushed at the same time as the Windows 10 ones. Another marketing plot on Microsoft's part to get people to use Windows 10 because they get patches earlier via Windows Update?

    ... I hope not :- )
     
    airbud7 and chispy like this.

Share This Page