🔒Spectre Hits RISC-V Chips: Major Vulnerabilities Found
RISC-V chips aren't immune to Spectre attacks
TL;DR
Researchers found that commercially available out-of-order RISC-V processors like SiFive P550 and T-Head Xuantie C910/C920 are vulnerable to Spectre attacks. This affects Linux kernel memory leakage rates on the Xuantie C910 at 338 B/s.
Researchers have discovered that commercially available out-of-order RISC-V processors, including SiFive P550 and T-Head's Xuantie C910/C920, are vulnerable to Spectre attacks. This means developers using these chips in their projects need to be aware of potential security risks. The rate of arbitrary Linux kernel memory leakage on the Xuantie C910 is 338 B/s, highlighting the severity of the issue. Three patches have been merged into mainline Linux, with two more under review.
Key Points
Commercial out-of-order RISC-V processors are vulnerable to Spectre attacks, including the SiFive P550 and T-Head's Xuantie C910/C920
The rate of arbitrary Linux kernel memory leakage on the Xuantie C910 is 338 B/s, indicating severe security risks
Three patches have been merged into mainline Linux to address these vulnerabilities; two more are under review
SiFive has addressed specific findings related to P550, while T-Head (Alibaba) plans to publish ad-hoc speculation barriers for their processors at some point
RISC-V hardware lacks introspection interfaces necessary for observing and reasoning about microarchitectural features
Why It Matters
Developers using SiFive P550 or T-Head Xuantie C910/C920 in their projects need to be aware of the Spectre vulnerabilities. The Linux kernel memory leakage rate on Xuantie C910 at 338 B/s highlights the severity, requiring immediate attention and potential mitigation strategies.
Frequently Asked Questions
Why does this matter?
Developers using SiFive P550 or T-Head Xuantie C910/C920 in their projects need to be aware of the Spectre vulnerabilities. The Linux kernel memory leakage rate on Xuantie C910 at 338 B/s highlights the severity, requiring immediate attention and potential mitigation strategies.
What happened?
Researchers found that commercially available out-of-order RISC-V processors like SiFive P550 and T-Head Xuantie C910/C920 are vulnerable to Spectre attacks. This affects Linux kernel memory leakage rates on the Xuantie C910 at 338 B/s.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 2,950 builders reading daily.