Intel processors (fast store forwarding predictor): Improper isolation of a shared microarchitectural resource lets

Impact

Improper isolation of a shared microarchitectural resource lets a local authenticated user infer data from another context. Part of the steady drip of shared-predictor leaks that each cost another microcode revision and another small performance tax.

Who can reach it

Local authenticated code on the host.

What to do

Mitigated by an Intel microcode update plus OS/hypervisor changes. Microcode for this class is normally shipped by your distribution as an early-loadable image, so you can deploy it with a package update and a reboot without waiting for an OEM BIOS release - that distinction is the difference between a week and a quarter. Verify after reboot by reading /sys/devices/system/cpu/vulnerabilities/ rather than assuming the package took effect.

References