New BTR Spectre-v2 Attack Leaks Linux Kernel Memory and Steals Root Password Hashes

A newly disclosed Branch Target Reuse (BTR) attack technique abuses stale indirect-branch predictions in just-in-time (JIT) code to leak sensitive data from Linux kernel memory. An end-to-end proof of concept demonstrated recovery of a root password hash from the memory of the su process on modern Intel systems, despite enabled mitigations. BTR... Weiterlesen: New BTR Spectre-v2 Attack Leaks Linux Kernel Memory and Steals Root P…