Intel are not having a good time lately are they? More vulnerabilities in their CPUs have been made public.
How many is that Intel have had recently that affect them? Quite a lot. This time, it appears AMD are not affected at least. Still, this is a lot of major security problems to go through with Spectre and Meltdown, Foreshadow and ZombieLoad. Currently, Intel are saying that they're "not aware of any use of these issues outside of a controlled lab environment" so you don't need to go and panic just yet. Just keep an eye on updates for your distribution and motherboard BIOS updates.
Here's they two they're now talking about:
CVE-2020-0548 is an information disclosure vulnerability with a CVSS score of 2.8, low, referred to as Vector Register Sampling. This issue is rated “low” as the user would first need to be authenticated on the target system, the high complexity of an attack, and low confidence in the attacker’s ability to target and retrieve relevant data.
CVE-2020-0549 is also an information disclosure vulnerability requiring authenticated local access. The CVSS score is 6.5, medium. Referred to as L1D Eviction Sampling, the severity score is higher on this one because the attack complexity is lower and the ability to target specific data higher. This vulnerability has little to no impact in virtual environments that have applied L1 Terminal Fault mitigations.
If you have an Intel CPU made before Q4 2018, you're likely affected. CVE-2020-0549, which is also being called CacheOut which has a dedicated website mentions that "Intel inadvertently managed to partially mitigate this issue while addressing a previous issue".
You can see Intel's official post on it here.
Article taken from GamingOnLinux.com.
Some you may have missed, popular articles from the last month:
The comments on this article are closed.
All posts need to follow our rules. For users logged in: please hit the Report Flag icon on any post that breaks the rules or contains illegal / harmful content. Guest readers can email us for any issues.
Do you think that Intel does not know about all their backdoors? AND is more open-source, and for that is more secure and with no hidden stupid back-doors!
My next system will be AMD based, and for good, i never will use Intel again.
My next system will be AMD based, and for good, i never will use Intel again.
0 Likes
Comandante Ñoñardo Jan 29, 2020
No matter how many vulnerabilities they discover on Intel processors, I will keep using them because the LGA system is more robust..
... than the PGA ....
If, someday, AMD decide to implement the LGA system in the mid class processors, I will try them....
Sadly, actually AMD use the LGA system only in the Threadripper processor.
... than the PGA ....
If, someday, AMD decide to implement the LGA system in the mid class processors, I will try them....
Sadly, actually AMD use the LGA system only in the Threadripper processor.
0 Likes
I'd just like to point out that AMD CPU's aren't immune to vulnerabilities either. Check out this link from AMD themselves. https://www.amd.com/en/corporate/product-security
Also, my next build will be a AMD system. ;)
Also, my next build will be a AMD system. ;)
1 Likes, Who?
The vulnerabilities itself are not that interesting, because they are a lot more theoretical than previous ones.
But the important facts is:
These vulnerabilities were discovered bei the Defense Advanced Research Projects Agency (DARPA) and the Air Force Reseach Laboratory (AFRL) of Australia. So now the military (and probably secret services) seem to have an interest in such vulnerabilities. I wonder why...
But the important facts is:
These vulnerabilities were discovered bei the Defense Advanced Research Projects Agency (DARPA) and the Air Force Reseach Laboratory (AFRL) of Australia. So now the military (and probably secret services) seem to have an interest in such vulnerabilities. I wonder why...
0 Likes
The vulnerabilities itself are not that interesting, because they are a lot more theoretical than previous ones.
But the important facts is:
These vulnerabilities were discovered bei the Defense Advanced Research Projects Agency (DARPA) and the Air Force Reseach Laboratory (AFRL) of Australia. So now the military (and probably secret services) seem to have an interest in such vulnerabilities. I wonder why...
Them releasing their knowledge to the public is not the dangerous case...
0 Likes
Not everybody changed their computer yesterday, and Intel was better for decades.^-- This.
0 Likes
My i7-4790 has served me very well for many years, but lately I've been itching to upgrade the older MoBo it lives in and leave LGA-1050 altogether.
I've been eyeballing AMD MoBos/CPUs because, lets face it---there is just more bang in them hard-earned bucks. I'm still saving up because I'm aiming for the future "proofing" that latest gen will get me, but it's gonna be AMD this time around.
I'd already made up my mind. This article is just a thumbs-up from the Universe. :)
Last edited by Nanobang on 29 January 2020 at 12:55 pm UTC
I've been eyeballing AMD MoBos/CPUs because, lets face it---there is just more bang in them hard-earned bucks. I'm still saving up because I'm aiming for the future "proofing" that latest gen will get me, but it's gonna be AMD this time around.
I'd already made up my mind. This article is just a thumbs-up from the Universe. :)
Last edited by Nanobang on 29 January 2020 at 12:55 pm UTC
0 Likes
For all the security flaws Intel have, they generally have better support than AMD (on the CPU side). AMD always seem to be a few months behind on adding needed features to the Kernel. They need to start getting ahead with software and take advantage of the performance and security dominance they're having right now.
0 Likes
Not everybody changed their computer yesterday, and Intel was better for decades.^-- This.
True but a lot did 3 years ago to yesterday :P
0 Likes
No matter how many vulnerabilities they discover on Intel processors, I will keep using them because the LGA system is more robust..
... than the PGA ....
If, someday, AMD decide to implement the LGA system in the mid class processors, I will try them....
Sadly, actually AMD use the LGA system only in the Threadripper processor.
Can you expand on that somewhat?
I actually prefer PGA, I know bent pins can be a pain at times but if you're rough with them it's to be expected.
Better a few bent pins than this
Ok,That's to the extreme but you get my point.
1 Likes, Who?
Comandante Ñoñardo Feb 1, 2020
No matter how many vulnerabilities they discover on Intel processors, I will keep using them because the LGA system is more robust..
... than the PGA ....
If, someday, AMD decide to implement the LGA system in the mid class processors, I will try them....
Sadly, actually AMD use the LGA system only in the Threadripper processor.
Can you expand on that somewhat?
In the LGA system, once locked, the processor is firmly attached to the socket...
In the PGA system, because of a design error, the processor is not firmly attached to the socket. And because of that ...this happen very often ... :|
It happened to me and, because of that, a couple of contacts in the socket were broken and the mobo never worked again...
So,Never again, AMD.... Never again with the PGA socket.
And the AMD Threadripper that use the LGA socket is too expensive for me, so I will keep using Intel until AMD change their mind about the successor of the AM4 socket.
1 Likes, Who?
So basically because of your shall we say heavy hand and not looking at what you are doing that's a failing of AMD's/PGA
I've used PGA since the original P100(Socket 7 sPGA) days and I have never ever done that!
1 Likes, Who?
In the PGA system, because of a design error, the processor is not firmly attached to the socket. And because of that ...this happen very often ... :|How often does this actually happen? Any statistics available anywhere? As an anecdote, I've built and rebuilt many computers over the years and I have never had this problem. I know people who sell and repair hardware and they've never mentioned this either. I've seen bent pins, but nothing that couldn't be easily fixed.
As you said, it can happen. Especially if the socket has a flimsy locking mechanism, like some do. The "very often" part I find less credible.
0 Likes
It happened to me and, because of that, a couple of contacts in the socket were broken and the mobo never worked again...
I nearly broke my new Ryzen because I didn't pull the attaching lever. I hope you have been more clever than me? Because with the lever, i used quite some power to attach the fan and the CPU still didn't move (or break)...
0 Likes
Not everybody changed their computer yesterday, and Intel was better for decades.^-- This.
True but a lot did 3 years ago to yesterday :P
I wanted to buy a new processor for some time now, but I couldn't justify buying Ryzen 1000 or 2000. So for me, it's more like half a year instead of three.
0 Likes
So basically because of your shall we say heavy hand and not looking at what you are doing that's a failing of AMD's/PGA
I've used PGA since the original P100(Socket 7 sPGA) days and I have never ever done that!
oh the good old days ! did you also had a K6-2?? that sure was a superior cpu, AMD superiority has always been there! ^_^ I ran vista on that.
AMD has always been very linux friendly basically the first full OS that ran in full 64bits mode, when their first 64bits cpus came out was Linux. IT's simply not true that Intel linux support is better. otoh what is actually true is that ATI's support before it was AMD was crap.
I've had both a K6 233 and a k6-2 500 :D
Surprising large amount of people think its AMD's fault in the ATI era.
1 Likes, Who?
Patreon
PayPal
See more from me