Transient execution that results from mispredicted return instructions can cause persistent changes in the microarchitecture, which can be used to intentionally leak secrets from a victim process using a covert channel
Description
Transient execution that results from mispredicted return instructions can cause persistent changes in the microarchitecture, which can be used to intentionally leak secrets from a victim process using a covert channelRisk Assesment: 5.6
CWE
CVE
Attack Surfaces
Speculation (MITRE EMB3D PID-11)
Attack Vectors
Speculative Execution (MITRE EMB3D TID-103)
Defenses
preventing speculation altogether, Inserting fences at every return instruction, Disabling speculation in the hardware
preventing speculation on secrets, Implementing ProSpeCT or similar mechanisms in hardware, ...
removing the covert channel, Cache partitioning, Disabling hyperthreading, ...