The GoFetch vulnerability found on Apple M-series and Intel Raptor Lake CPUs has been further unpacked by the researchers who first disclosed it. GoFetch is a security exploit that takes advantage of data memory-dependent prefetchers (DMPs), not unlike speculative execution vulnerabilities such as Spectre. Essentially, data can be leaked out of a core's cache when DMP is enabled, creating a potential attack vector for hackers. DMPs are present on all Apple M-series CPUs and Intel's Raptor Lake processors, and the dedicated website for GoFetch now shows how exactly the exploit is carried out. Within minutes (the footage is sped up so it's hard to say exactly how many), 560 bits of data was leaked from an RSA-protected server. The GoFetch exploit isn't earth-shattering, as it's in a similar vein to Spectre, Meltdown, and other vectors that rely on a CPU's performance-boosting prediction features. Normally, there are software-based patches for chips that have hardware-level exploits, and usually that just involves disabling the speculative feature (and thus decreasing performance), but in the case of M1 and M2 CPUs, researchers say that's not possible. The researchers address the common question of whether DMP can be disabled, explaining that yes, but only on some processors. "We observe that the DIT bit set on M3 CPUs effectively disables the DMP. This is not the case for the M1 and M2." So, GoFetch can be solved with a software patch for M3 and Raptor Lake CPUs, but not for M1...
GoFetch exploit can't be disabled on Apple's M1 and M2 chips
The Register
·Matthew Connatser
·Published Mar 25, 2024
·Updated
Affected Software
5 affected components
Apple M-series CPUs
Apple M1 CPU
Apple M2 CPU
Apple M3 CPU
Intel Raptor Lake processors
Frequently Asked Questions
1
What is the main topic of this article?
The article discusses the GoFetch security exploit affecting Apple M-series and Intel Raptor Lake CPUs.
2
What security implications are discussed in relation to the GoFetch exploit?
The GoFetch exploit demonstrates security vulnerabilities that cannot be disabled on Apple's M1 and M2 chips.
3
Which processors are specifically affected by the GoFetch vulnerability?
The affected processors include Apple's M-series CPUs, M1, M2, M3, and Intel's Raptor Lake processors.
4
Can the GoFetch vulnerability be mitigated on Apple devices?
The article highlights that the GoFetch vulnerability cannot be disabled on Apple's M1 and M2 chips.
5
Who conducted the research on the GoFetch exploit?
The researchers who initially disclosed the GoFetch vulnerability have further unpacked its implications.