tag: Cpu-Vulnerability · 2 items
- Engineer — Learn: Novel speculative-execution research affecting JIT-heavy runtimes and the kernel across multiple CPU vendors — no enrichment signals (no KEV, PoC, or EPSS) and no concrete patch yet, so no immediate action; worth tracking for upcoming OS/microcode mitigations.
- SOC/IR — Skip
- Leader — Skip
- Engineer — Learn: MIT CSAIL research shows a timing gap in branch-predictor sanitization can be re-poisoned by a local unprivileged process, defeating default Spectre v2 mitigations on AMD Zen 2 and Intel; no patch or workaround is available yet, but engineers running multi-tenant Linux workloads should track vendor microcode and kernel responses as they emerge.
- SOC/IR — Skip
- Leader — Skip