Last week was AMD this week Intel major security flaws found in CPUs

[xlbooyahlx]

A new security vulnerability, called Downfall, was revealed today by Intel and the researcher who discovered it, Daniel Moghimi. The new attack uses Gather Data Sampling to steal data and other sensitive information from other users on a computer with Intel processors from 2015 through 2019 ranging from sixth gen Skylake through eleventh gen Rocket Lake and Tiger Lake.

Intel 'Downfall' Bug Steals Encryption Keys, Data From Years of CPUs​

That's six generations of CPUs affected!

 

[xlbooyahlx]

Intel SGX Support in the Linux Kernel​

https://www.phoronix.com/news/Intel-SGX2-Linux-6.0

 

[xlbooyahlx]

Apparently Red Hat has already given it a CVSS v3 Base Score of 6.5

 

[xlbooyahlx]

Looks like Debian sid has a new kernel fix and issued microcode to fix the issue, so it should trickle down with kernel backports and microcode sooner rather than later one would hope?

 

[xlbooyahlx]

I installed the microcode from the .deb file from the debian ftp servers on one of my baby NUCs just to test it out, and it installed without a hitch

 

[osprey]

Brief current info on this issue here: https://www.phoronix.com/news/New-Linux-Stable-Downfall
The comments section linked has some further opinions which may bring a smile to one's face.

 

[xlbooyahlx]

smile to one's face

Woot!