Ukufunyanwa komngcipheko omtsha wokuqikelelwa kwezinto ezimbini kwafunyanwa kuchaphazela i-Intel

Cache Out

Isampulu yokuKhutshwa kwe-L1D, I-L1DES okanye eyaziwa ngokuba yiCacheOut yenye yezoyikiso ezintsha ezo zongezwa kuluhlu lwabaqhelana nabo Bavumela ithuba lokuhlasela ii-Intel CPUs ngokusebenzisa ikhowudi yokubulawa kwekhowudi. Eli sisihlandlo sesithathu ngaphantsi konyaka apho i-Intel ibonise iseti entsha yobuthathaka obunxulumene nokusebenza okuqikelelwayo kweeprosesa zayo.

Ukususela ekuqaleni kweengxaki ze-Intel zaqala ngeSpecter kunye ne-Meltdown, kwaye emva koko banikezela ubuthathaka obungakumbi obuchongiweyo ukususela ngoko, kuquka i-SPOILER, i-Foreshadow, i-SwapGS, i-ZombieLoad, i-RIDL kunye ne-Fallout. Ewe, uhlaselo olutsha luchaphazela ii-Intel CPUs ezenziwe ngaphambi kwekota yesine ye-2018.

Ngokungafaniyo nobuthathaka be-MDS (Microarchitectural Data Sampling), ngokwewebhusayithi yeCacheOut:

Umhlaseli unokusebenzisa iindlela zokugcina ii-CPUs ukukhetha ngokuthe ngqo idatha eza kuvuza.

Abafunyanisi bayo babona ukuba sesichengeni I-CacheOut njengolunye uhlaselo lokwenziwa kwentelekelelo kunye a iziphumo ezingathanga ngqo zeSpecter kunye neMeltdown.

Kwaye abaphandi beVUSec babonakala befumene ubuthathaka ngokuhambelanayo, kuba ngokweCVE, iCacheOut iyafana nokwahluka kwe-RIDL, abathi abafumani bayo bayibize njenge-L1DES (balandela igama elisemthethweni le-Intel njengeSampulu yokuKhutshwa kwe-L1D)

Kwinqanaba eliphezulu, iCacheOut inyanzelisa ingxabano kwi-L1-D cache ukukhupha idatha ekhomba kuyo kwi-cache. Sichaza iinguqu ezimbini.

Okokuqala, kwimeko apho i-cache iqulethe idatha eguqulwe lixhoba, imixholo yomgca we-cache uhamba nge-LFB ngelixa ubhalwa kwimemori.

Okwesibini, xa umhlaseli efuna ukuvuza idatha engalungiswanga lixhoba, umhlaseli uqala ngokukhupha idatha kwi-cache aze ayifumane xa edlula kumgca wokugcwalisa i-buffers ukwanelisa i-concurrent ifundwe lixhoba.

Iindlela zokukhusela ze-Intel zokuphahlazeka aziyi kuba nasiphumo ngokuchasene neCacheOut, kodwa nceda uqinisekise ukuba ubuthathaka abunakusetyenziswa ngesikhangeli.

I-VUSec ikwabonelela ngobungqina bokuxhaphaza ngokuba sesichengeni kwi-Github. Ukuba sesichengeni kuthwala i-CVE-2020-0549 njengeCacheOut.

Ngexesha I-Intel ikwabela ikhowudi yayo (INTEL-SA-00329) kwaye iyihlela njengemodareyitha (6.5).  Ngokutsho kwe-Intel ngokwayo, idatha esuka kwi-L1 data cache (L1D) inokuphinda iqondiswe kwi-buffer ye-L1D engasetyenziswanga (gcwalisa i-buffer).

Idatha inokuvuza ngokukodwa kwaye ifundwe kule buffer yokukhuselwa ngohlaselo lwetshaneli esecaleni. Ke ngoko, i-Intel ibiza le ndlela yokufunda i-L1D yokuKhutshwa kweSampulu kwaye ithatha amaxhoba anokubakho njengeseti ye-L1TF (i-Foreshadow kunye ne-Foreshadow-NG). Ngokungafaniyo ne-Foreshadow, abahlaseli akufuneki bakwazi ukubuza ngokuthe ngqo iidilesi zenyama ngeCacheOut.

Obunye ubuthathaka ezithe zatyhilwa kwaye Umkhondo we-Intel njengeSampulu yoBhaliso lweVector (VRS), Yeyona nto ibaluleke kakhulu kuba i-Intel ithi esi siphene asibi kakhulu kuba ubunzima bohlaselo buphezulu kwaye amathuba okuba umhlaseli afumane idatha efanelekileyo aphantsi. Ukongeza kuloo nto i-VRS ikwajongwa njengolunye uhlobo lohlaselo lwe-RIDL.

I-VRS inxulumene nokuvuza kwi-Store Buffer yeziphumo zokufunda imisebenzi yeerejista ze-vector eziye zatshintshwa ngexesha lokwenziwa kwemiyalelo ye-vector (SSE, AVX, AVX-512) kwi-CPU efanayo.

Ukuvuza kwenzeka kwiimeko ezikhethekileyo kwaye kubangelwa yinto yokuba umsebenzi oqikelelwayo owenziweyo, okhokelela ekubonakalisweni kwemeko yerejista ye-vector kwi-buffer yokugcina, ilibazisekile kwaye iyaphela emva kokuba isithinteli sisusiwe. kwaye hayi ngaphambili.

Ekugqibeleni, i-Intel yabhengeza ukuba kwimiba yeeveki iya kuba sele ilungile uhlaziyo olufanelekileyo ukusombulula ezi ntsilelo.

Ngelixa i-AMD, i-ARM kunye ne-IBM CPUs azichatshazelwa kobu buthathaka.

Ukuba sesichengeni ukuxhaphaza inokufunyanwa kwezi linki zilandelayo.


Shiya uluvo lwakho

Idilesi yakho ye email aziyi kupapashwa. ezidingekayo ziphawulwe *

*

*

  1. Uxanduva lwedatha: UMiguel Ángel Gatón
  2. Injongo yedatha: Ulawulo lwe-SPAM, ulawulo lwezimvo.
  3. Umthetho: Imvume yakho
  4. Unxibelelwano lwedatha: Idatha ayizukuhanjiswa kubantu besithathu ngaphandle koxanduva lomthetho.
  5. Ukugcinwa kweenkcukacha
  6. Amalungelo: Ngalo naliphi na ixesha unganciphisa, uphinde uphinde ucime ulwazi lwakho.