First published: Tue Mar 08 2022(Updated: )
A flaw was found in hw. The Intra-mode BTI refers to a variant of Branch Target Injection aka SpectreV2 (BTI) where an indirect branch speculates to an aliased predictor entry for a different indirect branch in the same predictor mode, and a disclosure gadget at the predicted target transiently executes. These predictor entries may contain targets corresponding to the targets of an indirect near jump, indirect near call, and near return instructions, even if these branches were only transiently executed. The managed runtimes provide an attacker with the means to create the aliasing required for intra-mode BTI attacks.
Credit: secure@intel.com secure@intel.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/kernel-rt | <0:4.18.0-372.9.1.rt7.166.el8 | 0:4.18.0-372.9.1.rt7.166.el8 |
redhat/kernel | <0:4.18.0-372.9.1.el8 | 0:4.18.0-372.9.1.el8 |
Intel Atom C3308 | ||
Intel Atom C3336 | ||
Intel Atom C3338 | ||
Intel Atom C3338r | ||
Intel Atom C3436l | ||
Intel Atom C3508 | ||
Intel Atom C3538 | ||
Intel Atom C3558 | ||
Intel Atom C3558r | ||
Intel Atom C3558rc | ||
Intel Atom C3708 | ||
Intel Atom C3750 | ||
Intel Atom C3758 | ||
Intel Atom C3758r | ||
Intel Atom C3808 | ||
Intel Atom C3830 | ||
Intel Atom C3850 | ||
Intel Atom C3858 | ||
Intel Atom C3950 | ||
Intel Atom C3955 | ||
Intel Atom C3958 | ||
Intel Atom P5921b | ||
Intel Atom P5931b | ||
Intel Atom P5942b | ||
Intel Atom P5962b | ||
Intel Atom X5-a3930 | ||
Intel Atom X5-a3940 | ||
Intel Atom X5-a3950 | ||
Intel Atom X5-a3960 | ||
Intel Atom X5-e3930 | ||
Intel Atom X5-e3940 | ||
Intel Atom X5-z8300 | ||
Intel Atom X5-z8330 | ||
Intel Atom X5-z8350 | ||
Intel Atom X5-z8500 | ||
Intel Atom X5-z8550 | ||
Intel Atom X6200fe | ||
Intel Atom X6211e | ||
Intel Atom X6212re | ||
Intel Atom X6413e | ||
Intel Atom X6425e | ||
Intel Atom X6425re | ||
Intel Atom X6427fe | ||
Intel Atom X7-e3950 | ||
Intel Atom X7-z8700 | ||
Intel Atom X7-z8750 | ||
Intel Celeron 5305u | ||
Intel Celeron 6305 | ||
Intel Celeron 6305e | ||
Intel Celeron 6600he | ||
Intel Celeron G5205u | ||
Intel Celeron G5305u | ||
Intel Celeron G5900 | ||
Intel Celeron G5900t | ||
Intel Celeron G5905 | ||
Intel Celeron G5905t | ||
Intel Celeron G5920 | ||
Intel Celeron G5925 | ||
Intel Celeron G6900 | ||
Intel Celeron G6900t | ||
Intel Celeron J3355 | ||
Intel Celeron J3355e | ||
Intel Celeron J3455 | ||
Intel Celeron J3455e | ||
Intel Celeron J4005 | ||
Intel Celeron J4025 | ||
Intel Celeron J4105 | ||
Intel Celeron J4125 | ||
Intel Celeron J6413 | ||
Intel Celeron N3350 | ||
Intel Celeron N3350e | ||
Intel Celeron N3450 | ||
Intel Celeron N4000 | ||
Intel Celeron N4020 | ||
Intel Celeron N4100 | ||
Intel Celeron N4120 | ||
Intel Celeron N4500 | ||
Intel Celeron N4504 | ||
Intel Celeron N5100 | ||
Intel Celeron N5105 | ||
Intel Celeron N6211 | ||
Intel Core I3-1000g1 | ||
Intel Core I3-1000g4 | ||
Intel Core I3-1005g1 | ||
Intel Core I3-10100 | ||
Intel Core I3-10100f | ||
Intel Core I3-10100t | ||
Intel Core I3-10100te | ||
Intel Core I3-10105 | ||
Intel Core I3-10105f | ||
Intel Core I3-10105t | ||
Intel Core I3-10110u | ||
Intel Core I3-10300 | ||
Intel Core I3-10300t | ||
Intel Core I3-10305 | ||
Intel Core I3-10305t | ||
Intel Core I3-10320 | ||
Intel Core I3-10325 | ||
Intel Core I3-11100he | ||
Intel Core I3-1110g4 | ||
Intel Core I3-1115g4 | ||
Intel Core I3-1115g4e | ||
Intel Core I3-1115gre | ||
Intel Core I3-1120g4 | ||
Intel Core I3-1125g4 | ||
Intel Core I3-12100 | ||
Intel Core I3-12100f | ||
Intel Core I3-12100t | ||
Intel Core I3-1220p | ||
Intel Core I3-12300 | ||
Intel Core I3-12300t | ||
Intel Core I3-l13g4 | ||
Intel Core I5-10110y | ||
Intel Core I5-10200h | ||
Intel Core I5-10210u | ||
Intel Core I5-10210y | ||
Intel Core I5-10300h | ||
Intel Core I5-1030g4 | ||
Intel Core I5-1030g7 | ||
Intel Core I5-10310y | ||
Intel Core I5-1035g1 | ||
Intel Core I5-1035g4 | ||
Intel Core I5-1035g7 | ||
Intel Core I5-10400 | ||
Intel Core I5-10400f | ||
Intel Core I5-10400h | ||
Intel Core I5-10400t | ||
Intel Core I5-10500 | ||
Intel Core I5-10500t | ||
Intel Core I5-10500te | ||
Intel Core I5-10505 | ||
Intel Core I5-10600 | ||
Intel Core I5-10600k | ||
Intel Core I5-10600kf | ||
Intel Core I5-10600t | ||
Intel Core I5-11260h | ||
Intel Core I5-11300h | ||
Intel Core I5-1130g7 | ||
Intel Core I5-11320h | ||
Intel Core I5-1135g7 | ||
Intel Core I5-11400 | ||
Intel Core I5-11400f | ||
Intel Core I5-11400h | ||
Intel Core I5-11400t | ||
Intel Core I5-1140g7 | ||
Intel Core I5-1145g7 | ||
Intel Core I5-1145g7e | ||
Intel Core I5-1145gre | ||
Intel Core I5-11500 | ||
Intel Core I5-11500h | ||
Intel Core I5-11500t | ||
Intel Core I5-1155g7 | ||
Intel Core I5-11600 | ||
Intel Core I5-11600k | ||
Intel Core I5-11600kf | ||
Intel Core I5-11600t | ||
Intel Core I5-12400 | ||
Intel Core I5-12400f | ||
Intel Core I5-12400t | ||
Intel Core I5-1240p | ||
Intel Core I5-12450h | ||
Intel Core I5-12500 | ||
Intel Core I5-12500h | ||
Intel Core I5-12500t | ||
Intel Core I5-1250p | ||
Intel Core I5-12600 | ||
Intel Core I5-12600h | ||
Intel Core I5-12600k | ||
Intel Core I5-12600kf | ||
Intel Core I5-12600t | ||
Intel Core I5-8200y | ||
Intel Core I5-8210y | ||
Intel Core I5-8265u | ||
Intel Core I5-8310y | ||
Intel Core I5-8365u | ||
Intel Core I5-9300h | ||
Intel Core I5-9400 | ||
Intel Core I5-9400f | ||
Intel Core I5-9400h | ||
Intel Core I5-9600k | ||
Intel Core I5-9600kf | ||
Intel Core I5-l16g7 | ||
Intel Core I7-10510u | ||
Intel Core I7-10510y | ||
Intel Core I7-1060g7 | ||
Intel Core I7-10610u | ||
Intel Core I7-1065g7 | ||
Intel Core I7-10700 | ||
Intel Core I7-10700e | ||
Intel Core I7-10700f | ||
Intel Core I7-10700k | ||
Intel Core I7-10700kf | ||
Intel Core I7-10700t | ||
Intel Core I7-10700te | ||
Intel Core I7-10710u | ||
Intel Core I7-10750h | ||
Intel Core I7-10810u | ||
Intel Core I7-10850h | ||
Intel Core I7-10870h | ||
Intel Core I7-10875h | ||
Intel Core I7-11370h | ||
Intel Core I7-11375h | ||
Intel Core I7-11390h | ||
Intel Core I7-1160g7 | ||
Intel Core I7-1165g7 | ||
Intel Core I7-11700 | ||
Intel Core I7-11700f | ||
Intel Core I7-11700k | ||
Intel Core I7-11700kf | ||
Intel Core I7-11700t | ||
Intel Core I7-11800h | ||
Intel Core I7-1180g7 | ||
Intel Core I7-11850h | ||
Intel Core I7-11850he | ||
Intel Core I7-1185g7 | ||
Intel Core I7-1185g7e | ||
Intel Core I7-1185gre | ||
Intel Core I7-1195g7 | ||
Intel Core I7-1260p | ||
Intel Core I7-12650h | ||
Intel Core I7-12700 | ||
Intel Core I7-12700f | ||
Intel Core I7-12700h | ||
Intel Core I7-12700k | ||
Intel Core I7-12700kf | ||
Intel Core I7-12700t | ||
Intel Core I7-1270p | ||
Intel Core I7-12800h | ||
Intel Core I7-1280p | ||
Intel Core I7-7640x | ||
Intel Core I7-7740x | ||
Intel Core I7-7800x | ||
Intel Core I7-7820x | ||
Intel Core I7-8500y | ||
Intel Core I7-8565u | ||
Intel Core I7-8665u | ||
Intel Core I7-9700k | ||
Intel Core I7-9700kf | ||
Intel Core I7-9750hf | ||
Intel Core I7-9850h | ||
Intel Core I9-10850h | ||
Intel Core I9-10850k | ||
Intel Core I9-10885h | ||
Intel Core I9-10900 | ||
Intel Core I9-10900e | ||
Intel Core I9-10900f | ||
Intel Core I9-10900k | ||
Intel Core I9-10900kf | ||
Intel Core I9-10900t | ||
Intel Core I9-10900te | ||
Intel Core I9-10900x | ||
Intel Core I9-10920x | ||
Intel Core I9-10940x | ||
Intel Core I9-10980hk | ||
Intel Core I9-11900 | ||
Intel Core I9-11900f | ||
Intel Core I9-11900h | ||
Intel Core I9-11900k | ||
Intel Core I9-11900kf | ||
Intel Core I9-11900t | ||
Intel Core I9-11950h | ||
Intel Core I9-11980hk | ||
Intel Core I9-12900 | ||
Intel Core I9-12900f | ||
Intel Core I9-12900h | ||
Intel Core I9-12900hk | ||
Intel Core I9-12900k | ||
Intel Core I9-12900kf | ||
Intel Core I9-12900t | ||
Intel Core I9-7900x | ||
Intel Core I9-7920x | ||
Intel Core I9-7940x | ||
Intel Core I9-7960x | ||
Intel Core I9-9800x | ||
Intel Core I9-9820x | ||
Intel Core I9-9880h | ||
Intel Core I9-9900k | ||
Intel Core I9-9900kf | ||
Intel Core I9-9900x | ||
Intel Core I9-9920x | ||
Intel Core I9-9940x | ||
Intel Core I9-9960x | ||
Intel Core I9-9980hk | ||
Intel Core M3-8100y | ||
Intel Pentium Gold 7505 | ||
Intel Pentium Gold G6400 | ||
Intel Pentium Gold G6400t | ||
Intel Pentium Gold G6405 | ||
Intel Pentium Gold G6405t | ||
Intel Pentium Gold G6405u | ||
Intel Pentium Gold G6500 | ||
Intel Pentium Gold G6500t | ||
Intel Pentium Gold G6505 | ||
Intel Pentium Gold G6505t | ||
Intel Pentium Gold G6600 | ||
Intel Pentium Gold G6605 | ||
Intel Pentium Gold G7400 | ||
Intel Pentium Gold G7400t | ||
Intel Pentium J4205 | ||
Intel Pentium J6425 | ||
Intel Pentium N4200 | ||
Intel Pentium N4200e | ||
Intel Pentium N6415 | ||
Intel Pentium Silver J5005 | ||
Intel Pentium Silver J5040 | ||
Intel Pentium Silver N5000 | ||
Intel Pentium Silver N5030 | ||
Intel Pentium Silver N6000 | ||
Intel Pentium Silver N6005 | ||
Intel Puma 7 | ||
Intel Xeon Bronze 3204 | ||
Intel Xeon Bronze 3206r | ||
Intel Xeon D1700 | ||
Intel Xeon D2700 | ||
Intel Xeon E-2278g | ||
Intel Xeon E-2278ge | ||
Intel Xeon E-2278gel | ||
Intel Xeon E-2286m | ||
Intel Xeon E-2288g | ||
Intel Xeon E-2314 | ||
Intel Xeon E-2324g | ||
Intel Xeon E-2334 | ||
Intel Xeon E-2336 | ||
Intel Xeon E-2356g | ||
Intel Xeon E-2374g | ||
Intel Xeon E-2378 | ||
Intel Xeon E-2378g | ||
Intel Xeon E-2386g | ||
Intel Xeon E-2388g | ||
Intel Xeon Gold 5215 | ||
Intel Xeon Gold 5215l | ||
Intel Xeon Gold 5217 | ||
Intel Xeon Gold 5218 | ||
Intel Xeon Gold 5218b | ||
Intel Xeon Gold 5218n | ||
Intel Xeon Gold 5218r | ||
Intel Xeon Gold 5218t | ||
Intel Xeon Gold 5220 | ||
Intel Xeon Gold 5220r | ||
Intel Xeon Gold 5220s | ||
Intel Xeon Gold 5220t | ||
Intel Xeon Gold 5222 | ||
Intel Xeon Gold 5315y | ||
Intel Xeon Gold 5317 | ||
Intel Xeon Gold 5318h | ||
Intel Xeon Gold 5318n | ||
Intel Xeon Gold 5318s | ||
Intel Xeon Gold 5318y | ||
Intel Xeon Gold 5320 | ||
Intel Xeon Gold 5320h | ||
Intel Xeon Gold 5320t | ||
Intel Xeon Gold 6208u | ||
Intel Xeon Gold 6209u | ||
Intel Xeon Gold 6210u | ||
Intel Xeon Gold 6212u | ||
Intel Xeon Gold 6222v | ||
Intel Xeon Gold 6226 | ||
Intel Xeon Gold 6226r | ||
Intel Xeon Gold 6230 | ||
Intel Xeon Gold 6230n | ||
Intel Xeon Gold 6230r | ||
Intel Xeon Gold 6230t | ||
Intel Xeon Gold 6234 | ||
Intel Xeon Gold 6238 | ||
Intel Xeon Gold 6238l | ||
Intel Xeon Gold 6238r | ||
Intel Xeon Gold 6238t | ||
Intel Xeon Gold 6240 | ||
Intel Xeon Gold 6240l | ||
Intel Xeon Gold 6240r | ||
Intel Xeon Gold 6240y | ||
Intel Xeon Gold 6242 | ||
Intel Xeon Gold 6242r | ||
Intel Xeon Gold 6244 | ||
Intel Xeon Gold 6246 | ||
Intel Xeon Gold 6246r | ||
Intel Xeon Gold 6248 | ||
Intel Xeon Gold 6248r | ||
Intel Xeon Gold 6250 | ||
Intel Xeon Gold 6250l | ||
Intel Xeon Gold 6252 | ||
Intel Xeon Gold 6252n | ||
Intel Xeon Gold 6254 | ||
Intel Xeon Gold 6256 | ||
Intel Xeon Gold 6258r | ||
Intel Xeon Gold 6262v | ||
Intel Xeon Gold 6312u | ||
Intel Xeon Gold 6314u | ||
Intel Xeon Gold 6326 | ||
Intel Xeon Gold 6328h | ||
Intel Xeon Gold 6328hl | ||
Intel Xeon Gold 6330 | ||
Intel Xeon Gold 6330h | ||
Intel Xeon Gold 6330n | ||
Intel Xeon Gold 6334 | ||
Intel Xeon Gold 6336y | ||
Intel Xeon Gold 6338 | ||
Intel Xeon Gold 6338n | ||
Intel Xeon Gold 6338t | ||
Intel Xeon Gold 6342 | ||
Intel Xeon Gold 6346 | ||
Intel Xeon Gold 6348 | ||
Intel Xeon Gold 6348h | ||
Intel Xeon Gold 6354 | ||
Intel Xeon Platinum 8253 | ||
Intel Xeon Platinum 8256 | ||
Intel Xeon Platinum 8260 | ||
Intel Xeon Platinum 8260l | ||
Intel Xeon Platinum 8260y | ||
Intel Xeon Platinum 8268 | ||
Intel Xeon Platinum 8270 | ||
Intel Xeon Platinum 8276 | ||
Intel Xeon Platinum 8276l | ||
Intel Xeon Platinum 8280 | ||
Intel Xeon Platinum 8280l | ||
Intel Xeon Platinum 8351n | ||
Intel Xeon Platinum 8352m | ||
Intel Xeon Platinum 8352s | ||
Intel Xeon Platinum 8352v | ||
Intel Xeon Platinum 8352y | ||
Intel Xeon Platinum 8353h | ||
Intel Xeon Platinum 8354h | ||
Intel Xeon Platinum 8356h | ||
Intel Xeon Platinum 8358 | ||
Intel Xeon Platinum 8358p | ||
Intel Xeon Platinum 8360h | ||
Intel Xeon Platinum 8360hl | ||
Intel Xeon Platinum 8360y | ||
Intel Xeon Platinum 8362 | ||
Intel Xeon Platinum 8368 | ||
Intel Xeon Platinum 8368q | ||
Intel Xeon Platinum 8376h | ||
Intel Xeon Platinum 8376hl | ||
Intel Xeon Platinum 8380 | ||
Intel Xeon Platinum 8380h | ||
Intel Xeon Platinum 8380hl | ||
Intel Xeon Platinum 9221 | ||
Intel Xeon Platinum 9222 | ||
Intel Xeon Platinum 9242 | ||
Intel Xeon Platinum 9282 | ||
Intel Xeon Silver 4208 | ||
Intel Xeon Silver 4209t | ||
Intel Xeon Silver 4210 | ||
Intel Xeon Silver 4210r | ||
Intel Xeon Silver 4210t | ||
Intel Xeon Silver 4214 | ||
Intel Xeon Silver 4214r | ||
Intel Xeon Silver 4214y | ||
Intel Xeon Silver 4215 | ||
Intel Xeon Silver 4215r | ||
Intel Xeon Silver 4216 | ||
Intel Xeon Silver 4309y | ||
Intel Xeon Silver 4310 | ||
Intel Xeon Silver 4310t | ||
Intel Xeon Silver 4314 | ||
Intel Xeon Silver 4316 | ||
Intel Xeon W-10855 | ||
Intel Xeon W-10855m | ||
Intel Xeon W-10885m | ||
Intel Xeon W-11155mle | ||
Intel Xeon W-11155mre | ||
Intel Xeon W-11555mle | ||
Intel Xeon W-11555mre | ||
Intel Xeon W-11855m | ||
Intel Xeon W-11865mld | ||
Intel Xeon W-11865mre | ||
Intel Xeon W-11955m | ||
Intel Xeon W-1250 | ||
Intel Xeon W-1250p | ||
Intel Xeon W-1270 | ||
Intel Xeon W-1270p | ||
Intel Xeon W-1290 | ||
Intel Xeon W-1290e | ||
Intel Xeon W-1290p | ||
Intel Xeon W-1290t | ||
Intel Xeon W-1290te | ||
Intel Xeon W-1300 | ||
Intel Xeon W-1350 | ||
Intel Xeon W-1350p | ||
Intel Xeon W-1370 | ||
Intel Xeon W-1370p | ||
Intel Xeon W-1390 | ||
Intel Xeon W-1390p | ||
Intel Xeon W-1390t | ||
Intel Xeon W-2223 | ||
Intel Xeon W-2225 | ||
Intel Xeon W-2235 | ||
Intel Xeon W-2245 | ||
Intel Xeon W-2255 | ||
Intel Xeon W-2265 | ||
Intel Xeon W-2275 | ||
Intel Xeon W-2295 | ||
Intel Xeon W-3223 | ||
Intel Xeon W-3225 | ||
Intel Xeon W-3235 | ||
Intel Xeon W-3245 | ||
Intel Xeon W-3245m | ||
Intel Xeon W-3265 | ||
Intel Xeon W-3265m | ||
Intel Xeon W-3275 | ||
Intel Xeon W-3275m | ||
Oracle Communications Cloud Native Core Binding Support Function | =22.1.3 | |
Oracle Communications Cloud Native Core Network Exposure Function | =22.1.1 | |
Oracle Communications Cloud Native Core Policy | =22.2.0 | |
debian/linux | 5.10.223-1 5.10.226-1 6.1.115-1 6.1.119-1 6.11.10-1 6.12.5-1 |
Disabling unprivileged eBPF effectively mitigates the known attack vectors for exploiting intra-mode branch injections attacks. The default Red Hat Enterprise Linux kernel prevents unprivileged users from being able to use eBPF by the kernel.unprivileged_bpf_disabled sysctl. For the Red Hat Enterprise Linux 7 the eBPF for unprivileged users is always disabled. For the Red Hat Enterprise Linux 8 to confirm the current state, inspect the sysctl with the command: # cat /proc/sys/kernel/unprivileged_bpf_disabled The setting of 1 would mean that unprivileged users can not use eBPF, mitigating the flaw. Continue to enable SMEP and Enhanced IBRS. This is the default setting on eligible CPUs.
To mitigate the primary known attack vector, disable unprivileged eBPF: $ sudo sysctl kernel.unprivileged_bpf_disabled=1 or $ sudo sysctl kernel.unprivileged_bpf_disabled=2
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.