Transient execution that results from mispredicted store-to-load dependencies can cause persistent changes in the microarchitecture, which can be used to intentionally leak secrets from a victim process using a covert channel
Description
Transient execution that results from mispredicted store-to-load dependencies can cause persistent changes in the microarchitecture, which can be used to intentionally leak secrets from a victim process using a covert channelRisk Assesment: 5.6
CWE
CVE
Attack Surfaces
Speculation (MITRE EMB3D PID-11)
Attack Vectors
Speculative Execution (MITRE EMB3D TID-103)
Defenses
preventing speculation altogether, Inserting fences at every load, Inserting fences at sensitive loads, Disabling store-to-load speculation in the hardware
preventing speculation on secrets, Implementing ProSpeCT or similar mechanisms in hardware, ...
removing the covert channel, Cache partitioning, Disabling hyperthreading, ...