3 ms·
> For variant 1, a kernel JIT is definitely helpful, which is why the Project Zero PoC used it, but it's not required. If I'm understanding the post correctly
by Sean1708 9y ago
> For variant 1, a kernel JIT is definitely helpful, which is why the Project Zero PoC used it, but it's not required.
If I'm understanding the post correctly it says that JIT's not required for Intel CPUs, but is required for AMD.
- comex 9y agoTheir particular exploit for variant 1, which uses eBPF, only worked on AMD with the eBPF JIT, i.e. it did not work with the eBPF interpreter. But there are many other potential avenues to exploit that variant which have nothing to do with BPF. The result does suggest that it may generally be harder to trigger variant 1 on AMD processors (because they doesn't speculate as much?), but harder ≠ impossible.
- Sean1708 9y agoAh ok, thanks for clarifying.