Get all your news in one place.
100’s of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

Intel and AMD CPUs alike could be affected by this alarming new cyberattack

A computer being guarded by cybersecurity.

Academic researchers from the Vrije Universiteit Amsterdam have discovered a new Spectre-based flaw in several major upcoming CPU chips, but the hardware manufacturers are seemingly unfazed by the findings.

As reported by BleepingComputer researchers from the Systems and Network Security Group (VUSec Group) found a side-channel attack and dubbed it SLAM. It exploits hardware features being introduced in upcoming Intel, AMD, and Arm chips, allowing them to obtain root password hashes from the kernel memory. 

SLAM, short(ish) for “Spectre based on LAM” is described as a transient execution attack leveraging a memory feature that makes software use untranslated address bits in 64-bit linear addresses for storing metadata. All CPU manufacturers have this feature: on Intel devices, it’s Linear Address Masking (LAM), on AMD, it’s Upper Address Ignore (UAI), and on ARM, it’s Top Byte Ignore (TBI). 

Spectre v2 already mitigated, OEMs say

To pull off the attack, the researchers exploited a previously unanalyzed class of Spectre disclosure gadgets - code instructions that can be manipulated to trigger speculative execution which displays sensitive information. The information generated this way is usually discarded, but there are traces (altered cache states and such) that can be observed to extract important data. 

To observe the traces, the academics built a scanner and used it to find “hundreds” of exploitable gadgets on the Linux kernel. 

But hardware manufacturers don’t seem to be too fazed about the findings, with the majority believing they have already addressed the issue. ARM said its systems already mitigate against Spectre v2 and Spectre-BHB vulnerabilities, and as such need no additional checks. AMD’s comment was in the same vein and did not bother to release new updates. 

Intel, however, said it would provide software guidance before publishing new LAM-supported chips.

More from TechRadar Pro

Sign up to read this article
Read news from 100’s of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.