Re:Intel Confronts Potential ‘PR Nightmare’ With Reported Ch...
by pcwalton on Wednesday January 03, 2018 @10:45AM
(#16061896)
You don't need to be root.
> I'm having a hard time understanding why this is worse than any other local root escalation bug except for the consequences of the necessary patch.
It's not, as far as I'm aware. The fact that the patch has perf consequences is why it's such a big deal.
Re:Intel Confronts Potential ‘PR Nightmare’ With Reported Ch...
by dboreham on Wednesday January 03, 2018 @10:48AM
(#16061929)
I think the idea is that it is worse because the bug is in the hardware. The OS patches are just a workaround to make the hardware bug unexploitable, and they can lead to a significant performance penalty.
Re:Intel Confronts Potential ‘PR Nightmare’ With Reported Ch...
by ProblemFactory on Wednesday January 03, 2018 @02:30PM
(#16064222)
We don't know what the actual bug is yet, or how easy it would be to exploit it. People are speculating that either:
a) It would allow any non-root process to read full memory, including the kernel and other processes, or
b) It would allow one cloud VM to read full memory of other cloud VMs on the same physical machine, or
c) With enough cleverness, it would allow even sandboxed Javascript on a web page to read full memory of the computer that it is running on.
I'm having a hard time understanding why this is worse than any other local root escalation bug except for the consequences of the necessary patch.
EDIT: I see that /dev/mem is no longer a window on all of physical RAM in a default secure configuration. Is it true that there's no way for root to read kernel memory in a typical Linux instance? If so, the severity of this issue makes more sense to me.