Intel Foreshadow vulnerability

[kemical]

Intel has revealed another major security vulnerability in its CPUs, similar to the Meltdown/Spectre vulnerabilities revealed earlier this year.

It is understood that at this time there are no current exploits and further information can be found on the released Link Removed .

On August 14, 2018, Link Removed more details and mitigation information about a recently identified speculative execution side-channel method called L1 Terminal Fault (L1TF).
L1TF is a speculative execution side channel cache timing vulnerability. In this regard, it is similar to previously reported variants. There are three varieties of L1TF that have been identified. Each variety of L1TF could potentially allow unauthorized disclosure of information residing in the L1 data cache, a small pool of memory within each processor core designed to store information about what the processor core is most likely to do next.

AMD chips are thought not to be affected by the newly found issue.

 

[Mike]

Microsoft seems to be actively addressing this issue here:
https://support.microsoft.com/en-sg...te-for-vulnerabilities-in-windows-server-2008

No word on if microcode patches will significantly damage performance capabilities.