Technology newsroom
Researchers Discover New Spectre v2 Variant 'BTR' Affecting Intel, AMD, Arm CPUs, Risking Data Leakage!
Researchers have discovered a new Spectre v2 variant called 'Branch Target Reuse' (BTR), which affects modern CPUs from Intel, AMD, and Arm. It targets JIT compilers in web browsers and OS kernels, posing a significant risk of sensitive data leakage.
📌 Key Takeaways:
- A new Spectre v2 variant, Branch Target Reuse (BTR), has been discovered, affecting modern CPUs from Intel, AMD, and Arm.
- This attack targets the functionality of the CPU's Branch Target Buffer (BTB) to create a side-channel for accessing sensitive data.
- Software using Just-In-Time (JIT) compilers, such as web browsers, language runtimes, and OS kernels, are primary high-risk targets.
Security researchers have disclosed the discovery of a new security vulnerability, a sub-variant of the historically renowned Spectre v2. This new vulnerability, named Branch Target Reuse (BTR), is extremely concerning as it affects modern CPUs from almost all vendors, including Intel, AMD, and even Arm, which is used in mobile devices.
⚙️ The principle of BTR involves attacking a CPU component called the Branch Target Buffer (BTB), which is part of the Branch Prediction Unit (BPU) responsible for predicting the next instruction to accelerate processing. Attackers can use BTR techniques to trick the CPU into making incorrect instruction predictions and interfering with speculative execution, thereby creating a side-channel to snoop on data in memory that should not be accessible.
🎯 The primary targets of this attack are software that requires Just-In-Time compilers. The most obvious examples are web browsers like Chrome and Firefox, which use JIT to accelerate JavaScript. This also includes various programming language runtimes, and significantly, the operating system's Kernel itself can also be a target, allowing hackers to escalate privileges and gain control of the system.
🛡️ Although patches like Retpolines and Indirect Branch Restricted Speculation (IBRS) were previously released to mitigate Spectre v2, researchers have found that these measures may not be entirely sufficient to prevent BTR attacks. Researchers are currently coordinating with all CPU manufacturers to develop and release security updates, whether in the form of software or microcode.
💬 Are you concerned about this hard-to-fix hardware-level vulnerability? What do you think CPU manufacturers should do to prevent long-term issues?