June 13, 2018 – Intel Releases Security Advisory on Lazy FP State Restore Vulnerability

Many CPU architectures support lazy saving of floating point state (registers) by allowing floating point capability to be disabled, resulting in an exception when a floating point operation is performed. Virtually all floating point math is done in SSE (and thus XMM registers) in 64 bit mode. Attacker is able via a local process instead of web browser. A newly scheduled task can use the exploit described herein to infer the Floating Point register state of another task, which can be used to leak sensitive information.

Official announcement – https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.html

5 thoughts on “June 13, 2018 – Intel Releases Security Advisory on Lazy FP State Restore Vulnerability”

  1. I¡¦ve recently started a blog, the info you provide on this site has helped me tremendously. Thanks for all of your time

Comments are closed.