A vulnerability was reported in Intel CPUs. A local user can obtain potentially sensitive information from system memory.
A local user can conduct a speculative execution side-channel attack against the L1 cache to infer potentially sensitive information from L1 cache memory on the target system.
This method is referred to as the "L1 Terminal Fault (L1TF)" or "Foreshadow" attack.
Microprocessors that support Intel Software Guard Extensions (SGX) are affected [CVE-2018-3615].
Other Intel microprocessors that use speculative execution and address translations may be affected [CVE-2018-3620].
Other Intel microprocessors that use speculative execution and address translations and that host virtual systems may be affected [CVE-2018-3646].
The following models are affected:
Core i3 processor (45nm and 32nm)
Core i5 processor (45nm and 32nm)
Core i7 processor (45nm and 32nm)
Core M processor family (45nm and 32nm)
2nd generation Core processors
3rd generation Core processors
4th generation Core processors
5th generation Core processors
6th generation Core processors
7th generation Core processors
8th generation Core processors
Core X-series Processor Family for X99 platforms
Core X-series Processor Family for X299 platforms
Xeon processor 3400 series
Xeon processor 3600 series
Xeon processor 5500 series
Xeon processor 5600 series
Xeon processor 6500 series
Xeon processor 7500 series
Xeon Processor E3 Family
Xeon Processor E3 v2 Family
Xeon Processor E3 v3 Family
Xeon Processor E3 v4 Family
Xeon Processor E3 v5 Family
Xeon Processor E3 v6 Family
Xeon Processor E5 Family
Xeon Processor E5 v2 Family
Xeon Processor E5 v3 Family
Xeon Processor E5 v4 Family
Xeon Processor E7 Family
Xeon Processor E7 v2 Family
Xeon Processor E7 v3 Family
Xeon Processor E7 v4 Family
Xeon Processor Scalable Family
Xeon Processor D (1500, 2100)
The original advisory is available at:
Raoul Strackx, Jo Van Bulck, and Frank Piessens of imec-DistriNet, KU Leuven, Marina Minkin and Mark Silberstein of Technion, Ofir Weisse, Daniel Genkin, Baris Kasikci, and Thomas F. Wenisch of University of Michigan, and Yuval Yarom of University of Adelaide and Data61 reported this vulnerability.
A local user can obtain potentially sensitive information from L1 cache memory on the target system.