Menu
Multiple operating systems at risk as developers misinterpret Intel documentation

Multiple operating systems at risk as developers misinterpret Intel documentation

Systems flaws could be exploited allowing access to sensitive data in memory

Developers have inadvertently opened multiple operating systems up to attack after misinterpreting documentation on Intel architecture hardware debug exception.

As revealed by media outlet The Register, the design flaws contained within Linux, Windows, macOS, FreBSD and some Xen implementations enables attackers to crash Intel and AMD-powered PCs.

Riot Games' engineers Nick Peterson and Nemanja Mulasmajic were credited with the findings after reporting the vulnerability.

"In certain circumstances, after the use of certain Intel x86-64 architecture instructions, a debug exception pointing to data in a lower ring (for most operating systems, the kernel Ring 0 level) is made available to operating system components running in Ring 3," vulnerability analyst at the Software Engineering Institute – Carnegie Mellon University Garret Wassermann explained.

A list of affected vendors (Screenshot source: Carnegie Mellon University Software Engineering Institute)
A list of affected vendors (Screenshot source: Carnegie Mellon University Software Engineering Institute)

According to Wasserman, this could allow an attacker to utilise operating system APIs to gain access to sensitive memory information or control low-level operating system functions. 

"Several operating systems appear to incorrectly handle this exception due to interpretation of potentially unclear existing documentation and guidance on the use of these instructions," Wassermann said.

As a result, an attacker could read sensitive data in memory or control low-level operating system functions.

Vendors with affected systems have released updates including Apple, Linux Kernel, Microsoft, Red Hat, Ubuntu and VMware.

A list of affected vendors with links to provided updates can be found here



Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags securityinteloperating systemflaws

Featured

Slideshows

Meet the leading female front runners of the Kiwi channel

Meet the leading female front runners of the Kiwi channel

Reseller News honoured the leading female front runners of the New Zealand channel at the 2018 Women in ICT Awards (WIICTA) in Auckland. The awards honoured standout individuals across seven categories, spanning Entrepreneur; Innovation; Rising Star; Shining Star; Community; Technical and Achievement.

Meet the leading female front runners of the Kiwi channel
Meet the top performing customer-centric Microsoft channel partners

Meet the top performing customer-centric Microsoft channel partners

Microsoft honoured leading partners across the channel following a year of customer innovation and market growth in New Zealand. The 2018 Microsoft Partner Awards recognised excellence within the context of the end-user, spanning a host of emerging and established providers.

Meet the top performing customer-centric Microsoft channel partners
Reseller News launches new-look Awards at 2018 Judges’ Lunch

Reseller News launches new-look Awards at 2018 Judges’ Lunch

Introducing the Reseller News Innovation Awards, launched to the channel at the 2018 Judges’ Lunch in Auckland. With more than 70 judges now part of the voting panel, the new-look awards will reflect the changing dynamics of the channel, recognising excellence across customer value and innovation - spanning start-ups, partners, distributors and vendors.

Reseller News launches new-look Awards at 2018 Judges’ Lunch
Show Comments