Safe RET

Reported Context (2)

With neutralization-based mitigations (eIBRS on Intel and Safe RET on AMD), there is a gap between the time the branch predictor is isolated and when it is used by the victim branch. TONTOU Attack Bypasses Spectre v2 Mitigations to Leak Linux Kernel Data
They demonstrated arbitrary kernel memory disclosure on AMD Zen 2 and showed the issue affects AMD’s Safe RET mitigation on Zen 1 through Zen 4, with a Linux kernel fix already available. Interrupt Injection Can Bypass Linux Spectre v2 Defenses on AMD CPUs

CVE (1)

People (4)

MITRE ATT&CK (1)

Vendors (2)

Products (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.