[閒聊] The mysterious case of the Linux Page

看板Marginalman作者Apache (阿帕契)時間8年前 (2018/01/03 16:58)推噓0(0推 0噓 0→)

留言0則, 0人參與討論串1/1

The mysterious case of the Linux Page Table Isolation patches https://goo.gl/5miAKf tl;dr: there is presently an embargoed security bug impacting apparently all contemporary CPU architectures that implement virtual memory, requiring hardware changes to fully resolve. Urgent development of a software mitigation is being done in the open and recently landed in the Linux kernel, and a similar mitigation began appearing in NT kernels in November. In the worst case the software fix causes huge slowdowns in typical workloads. There are hints the attack impacts common virtualization environments including Amazon EC2 and Google Compute Engine, and additional hints the exact attack may involve a new variant of Rowhammer. 目前有一個禁用的安全漏洞影響到所有實作虛擬記憶體的現代CPU架構，需要硬體變更才能完全修復。軟體的緊急補救方案正在完成，近期內將會發布在Linux Kernel上，另外還有一個類似的補救也從11月開始出現在NT(Windows)上。軟體補丁在最糟的情況下會造成典型工作嚴重緩慢。這似乎也隱示了針對虛擬環境包括Amazon EC2和Google Compute Engine的攻擊，以及新變種的Rowhammer(藉由大量存取記憶體改變半導體內的電荷分布攻擊)。放棄字太多了 -- 我朋友0 https://i.imgur.com/ZjPRKHj.jpg