Security vulnerabilities found in Intel and AMD processors

guest · Aug 10, 2022

August 10, 2022

Security researchers have discovered vulnerabilities in Intel and AMD processors that may lead to information disclosure.

Most Intel 10th, 11th and 12th generation processors are affected by a new vulnerability that the researchers have named ÆPIC Leak. The vulnerability is an architectural bug according to the researchers, which sets it apart from Spectre and Meltdown vulnerabilities that have haunted Intel and AMD in the past years.

AMD Zen 2 and 3 processors are affected by a security vulnerability that the researches named SQUID. It is a side channel attack that is targeting CPU schedulers.
Click to expand...

The following paragraphs provide a high-level overview of both security issues. We provide links to the research papers and security advisories released by Intel and AMD.

Most home devices with affected processor models should be safe, as the attacks have certain requirements that make attacks on home systems unlikely.
Click to expand...

ÆPIC Leak: important resources

Intel Security Advisory

Intel list of affected processors

Research Paper (https://aepicleak.com/aepicleak.pdf)

Security researchers from Sapienza University or Rome, Graz University of Technology, Amazon Web Services, and CISPA Helmholtz Center for Information Security published the research paper ÆPIC Leak: Architecturally Leaking Uninitialized Data from the Microarchitecture recently.
The name is derived from the Advanced Programmable Interrupt Controller (APIC) and affects all Intel processors that are based on the Sunny Cove architecture. In particular, Ice Lake and Alder Lake processors are affected.
Click to expand...

AMD processors affected by SQUIP vulnerability
A new research paper by researchers from Lamarr Security Research, Graz University of Technology and Georgia Institute of Technology have discovered a new vulnerability affecting certain AMD processors.

Resource links:

Execution Unit Scheduler Contention Side-Channel Vulnerability on AMD Processors

SQUIP: Exploiting the Scheduler Queue Contention Side Channel
(https://stefangast.eu/papers/squip.pdf)

Click to expand...

Log in or Sign up

Security vulnerabilities found in Intel and AMD processors

guest Guest

Log in or Sign up

Security vulnerabilities found in Intel and AMD processors

guest Guest

Useful Searches