-
Part 1: Spectre-v2 Domain Isolation, does it fight against variants? (19-05-2025)
Preface: In computer architecture, a branch predictor is a digital circuit that tries to guess which way a branch will go before this is known definitively. Background: Although the Spectre v2 vulnerability has been protected by domain isolation technologies such as IBPB, eIBRS and BHI_NO, which prevent attackers from training the indirect branch predictor with…
-
Privilege Desynchronization: Cross-Privilege Spectre Attacks with Branch Privilege Injection – Part 2 (14-05-2025)
Preface: Before reading the detailed information, it is recommended to read Part 1 first. Privilege Desynchronization: Cross-Privilege Spectre Attacks with Branch Privilege Injection (Part 1) – http://www.antihackingonline.com/under-our-observation/privilege-desynchronization-cross-privilege-spectre-attacks-with-branch-privilege-injection-14-05-2025/ Technical details: It is to ensure the serialization of memory access. The internal operation is to add some delays in a series of memory accesses to ensure that…
-
Privilege Desynchronization: Cross-Privilege Spectre Attacks with Branch Privilege Injection (14-05-2025)
Preface: Enhanced IBRS (eIBRS) and Automatic IBRS (AutoIBRS) are features designed to mitigate the Spectre V2 vulnerability, which affects speculative execution in CPUs. Background: AutoIBRS is a similar feature introduced by AMD in their Zen 4 processors. It automatically manages IBRS mitigation resources across privilege level transitions, offering better performance compared to Retpoline. This feature…
-
CVE-2025-30217: SQL injection on Frappe web application framework (27th Mar 2025)
Preface: The Frappe Framework comes equipped with a wide range of built-in tools and features that accelerate the development process. Developers can leverage ready-to-use modules, templates, and components to create applications quickly. Background: Frappe Framework – A full-stack web application framework written in Python and Javascript. The framework provides a robust foundation for building web…
-
AMD urged software developers to implement best practices to avoid secret-dependent data accesses or control flows. (28-04-2024)
Originally published on April 26, 2024. Preface: (Level 3 cache) A memory bank built onto the motherboard or within the CPU module. The L3 cache feeds the L2 cache, and its memory is typically slower than the L2 memory, but faster than main memory. Background: The last-level cache (LLC) is the last chance for memory…
-
To be new or it was former: Rowhammer Attacks on AMD Zen-Based Platforms. So called ZenHammer (25-03-2024)
Preface: It is possible to trigger Rowhammer bit flips on DDR4 devices on AMD Zen 2 and Zen 3 systems despite deployed TRR mitigations, said researchers at ETH Zurich. Background: When high-energy charged particles pass through the crystal lattice of a silicon wafer, their charges can interfere with the electrons within the lattice itself and…
-
CVE-2023-27997 Lack of detail, but can we find hints? (12th June 2023)
Preface: If you need to push audio/video traffic over the tunnel DTLS can be a huge performance improvement. Background: Preferred DTLS TunnelIf enabled, FortiClient uses DTLS if it is enabled on the FortiGate and tunnel establishment is successful. If not enabled on the FortiGate or tunnel establishment does not succeed, TLS is used. DTLS tunnel…
-
About CVE-2023-29345 and CVE-2023-33143, Microsoft released Security Updated of the Chromium project (6th June 2023)
Preface: Windows has traditionally run on machines that are powered by x86 / x64 processors. Windows 11 adds the capability to run unmodified x64 Windows apps on Arm devices! This capability to run x86 & x64 apps on Arm devices gives end-users confidence that the majority of their existing apps & tools will run well…
-
Linux kernel BUG: About hugetlb[.]c in mm folder (22nd Mar 2023)
Preface: Enabling HugePages makes it possible for the operating system to support memory pages greater than the default (usually 4 KB). Using very large page sizes can improve system performance by reducing the amount of system resources required to access page table entries. Background: For Red Hat Enterprise Linux systems, it is recommend configure HugeTLB…
-
Have you upgraded your Linux kernel? (15th Mar 2023)
Preface: Blue screen of death (BSOD) is error display on Windows commonly. In Linux, it is unlikely and uncommon, but is it possible? Background: As the only copyright holder to the GPL-covered components of the software, you are free to add exceptions and additional terms to the GPLv3, as described in section 7 of that…