Windows 7 patch for Meltdown enabled arbitrary reads and writes in kernel memory

Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by computator on Wednesday March 28, 2018 @02:39AM (#16695871)

Has anyone actually confirmed this bug? The author seems to be an expert in low-level DMA security, but it would be nice to see independent confirmation. Reading through the comments so far, it doesn't seem so. The closest anyone comes is this: https://news.ycombinator.com/item?id=16693599

I was hoping to see someone who said:

(1) I tested a Windows 7 X64 machine without the Meltdown patch (pre-December 2017) and couldn't read arbitrary memory.

(2) Next I tested with Microsoft's Meltdown patch KBnnnnnnn (Jan or Feb 2018) and could read arbitrary memory. The system is insecure.

(3) I then tested with Microsoft patch KBnnnnnnn (March 2018) and can no longer read arbitrary memory. They fixed it.

[ Parent | on HN ]

Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by BrianG61UK on Friday March 30, 2018 @12:49PM (#16717689)

I finally found the fix. It's KB4100480. It makes the little test crash as it should. Phew!

[ Parent | on HN ]

Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by caf on Wednesday March 28, 2018 @07:00PM (#16702837)

I did use a modified version of my short test program to actually test modifying the page tables to read a chosen physical address, which worked just fine. The bug is real.

[ Parent | on HN ]

Re:Windows 7 patch for Meltdown enabled arbitrary reads and ... by BrianG61UK on Thursday March 29, 2018 @08:44PM (#16712648)

And KBnnnnnn that fixes it is which KB?

[ Parent | on HN ]