4 ms·
The bug isn't really KASLR, it's more about reading kernel memory from userspace through side channel attacks of speculative execution. KASLR is/was the cover
by dannyw 9y ago
The bug isn't really KASLR, it's more about reading kernel memory from userspace through side channel attacks of speculative execution.
KASLR is/was the cover for the kernel patches, to avoid disclosing the real bug.
- Abishek_Muthian 9y agoThe comment in linux kernel mailing list, does pin point attacks using 'speculative execution' but isn't access to kernel memory space by any means a potential hazard to the security depending upon KASLR?
- svet_0 9y agoIndeed, kernel memory read seems more likely than address only read, the memory probably needs to be cached (in L1 maybe?). Attack is a timing attack as can be seen in this very interesting tweet - https://twitter.com/brainsmoke/status/948561799875502080 https://twitter.com/brainsmoke/status/948561799875502080