The Register reports that a flaw in the design of Intel processors has programmers "scrambling" to redesign Linux and Windows kernels to shut down a potential attack vector that could potentially allow hackers to access passwords, files cached on a disk, and more. What's more, the fixes being worked on could reportedly slow down PCs by anywhere from five to 30 percent.
The bug itself is still under embargo, with specifics set to be released later this month, according to the report. However, some details of the flaw are available. From The Register:
It is understood the bug is present in modern Intel processors produced in the past decade. It allows normal user programs – from database applications to JavaScript in web browsers – to discern to some extent the layout or contents of protected kernel memory areas.
The fix that is in the works involves separating the kernel's memory from user processes as part of what's called Kernel Page Table Isolation (KPTI). The issue with this approach is that it could reportedly result in the aforementioned performance slowdowns after the kernel has been patched.
It's important to note that AMD says its processors are not impacted by this bug.
AMD processors are not subject to the types of attacks that the kernel page table isolation feature protects against. The AMD microarchitecture does not allow memory references, including speculative references, that access higher privileged data when running in a lesser privileged mode when that access would result in a page fault.
Since the flaw is present across Intel processors going back years, it impacts Linux, Windows, and macOS. For Windows users in particular, however, The Register reports that Microsoft shipped fixes with Windows Insider builds on the Fast ring in November and December, and the company is set to potentially roll out the fix to everyone in an upcoming Patch Tuesday update. While the details of the flaw aren't yet publicly available, we should learn much more once a fix is available.
Updated 4:22 PM ET: Intel has now responded to the issue, stating that the issue is not exclusive to Intel products, and that it is working with other companies across the industry, including AMD and ARM, to address the problem. Further, Intel says that it was planning to disclose the issue next week when "more software and firmware updates will be available." AMD has also confirmed that its chips are affected in some capacity, but claims that there is "near zero risk to AMD processors at this time."
Updated 7:30 PM ET: Researchers have now disclosed two new exploits that impact virtually all modern processors from ARM, Intel, and AMD. Microsoft has also issued an emergency patch for Windows users.
Your Phone (beta) adds multi-PC support fix for the Surface Duo 2
Surface Duo 2 owners could only use Your Phone on one single PC at a time, but a new beta version of the app appears to fix that. Here’s what you need to know and what to expect for the Surface Duo 2’s next update.
Halo Infinite's customization options are unacceptably shallow
Fans were promised a deep and satisfying customization system for Halo Infinite, but what we got is shockingly shallow and restrictive.
NVIDIA RTX 40-series GPUs coming 2022, according to report
Though a global chip shortage has made it very hard to purchase an RTX 30-series GPU, that doesn't appear to be stopping NVIDIA. Based on a recent report, it's forging ahead with its RTX 40-series plans for 2022.
Check out the best RAM for your new 12th Gen Intel Core CPU
Intel's 12th Gen Intel Core desktop CPUs are here. They come with a new socket and chipset, with support for DDR4 or DDR5 RAM depending on the motherboard. We've rounded up a bunch of great RAM right here to help you with your new build.