New
#1
Do we know which CPU's are affected? Assume it is not in AMD?
Kernel memory leaking Intel processor design flaw
- https://security.googleblog.com/2018...-you-need.html
- https://newsroom.intel.com/news/inte...arch-findings/
- Intel Issues Updates to Protect Systems from Security Exploits - Windows 10 Forums
- Windows Client Guidance against speculative execution vulnerabilities - Windows 10 Forums
- Surface updates for recent chip-related security vulnerability Surface - Windows 10 Forums
-
-
New #2
I wonder how long the intelligence agencies have known about this bug and have been exploiting it?
-
New #3
Source: Huge Intel CPU Bug Allegedly Causes Kernel Memory Vulnerability With Up To 30% Performance Hit In Windows And Linux | HotHardwareThomas Lendacky, a member of the Linux OS group at AMD, posted the following over at LKML:
AMD processors are not subject to the types of attacks that the kernel page table isolation feature protects against. The AMD microarchitecture does not allow memory references, including speculative references, that access higher privileged data when running in a lesser privileged mode when that access would result in a page fault.
-
New #4
these changes were seeded to beta testers running fast-ring Windows Insider builds in November and December.
I'm curious if any Insiders are experiencing significant slow downs?
-
New #5
If Insiders didn't report performance loss in the months of November throughout December then I doubt non-insiders will notice much either. Also this will unlikely affect gaming performance. But I guess we'll have to wait and see to conclude anything at this point.
-
New #6
It figures doesn't it Shawn?
We all "invest" in 8700K's, 1080 Ti's, and high end ASUS Maximus(different ones) gaming motherboards, and now our benchmarking is going to go to the cats
-
New #7
I just wonder how much of this is hyperventilating. If it has been a vulnerability for 10 years, why have we not heard about it before and why have there been no reports of anyone being affected? I really believe there is no OS, piece of software or probably hardware that cannot be compromised. You just have to know where to look. Why do we get security patches constantly? I'm sure there is much of the same thing with driver updates for hardware. Because holes were found and need to be plugged. I think every piece of software is no different It just may not be as big of a deal as everyone is saying. The patch went out in Nov and Dec on the insider builds and I don't recall anyone screaming about a loss of performance, and 35% loss would be very noticeable. I guess time will tell and we shall see pretty soon.
-
New #8
Windows 10 1709 vs 17063 sampled benchmarks (German / auf Deutsch)
-
-
New #9
5% to 30%? Suspect that may mean that older CPU's will come off worse. Wonder what other wonderful surprises are in store for 2018?
Kernel memory leaking Intel processor design flaw
Last Updated: 04 Jan 2018 at 18:46
A fundamental design flaw in Intel's processor chips has forced a significant redesign of the Linux and Windows kernels to defang the chip-level security bug.
Programmers are scrambling to overhaul the open-source Linux kernel's virtual memory system. Meanwhile, Microsoft is expected to publicly introduce the necessary changes to its Windows operating system in an upcoming Patch Tuesday: these changes were seeded to beta testers running fast-ring Windows Insider builds in November and December.
Crucially, these updates to both Linux and Windows will incur a performance hit on Intel products. The effects are still being benchmarked, however we're looking at a ballpark figure of five to 30 percent slow down, depending on the task and the processor model. More recent Intel chips have features – such as PCID – to reduce the performance hit. Your mileage may vary.
Tweet
— Twitter API (@user) View on Twitter
Similar operating systems, such as Apple's 64-bit macOS, will also need to be updated – the flaw is in the Intel x86-64 hardware, and it appears a microcode update can't address it. It has to be fixed in software at the OS level, or go buy a new processor without the design blunder.
Details of the vulnerability within Intel's silicon are under wraps: an embargo on the specifics is due to lift early this month, perhaps in time for Microsoft's Patch Tuesday next week. Indeed, patches for the Linux kernel are available for all to see but comments in the source code have been redacted to obfuscate the issue.
However, some details of the flaw have surfaced, and so this is what we know.
Read more: 'Kernel memory leaking' Intel processor design flaw forces Linux, Windows redesign - The Register
See also:
Quote
Related Discussions
