Intel processors (register file data sampling): RFDS: stale data left in the integer, floating-point and vector

CVSS 6.5CVE-2023-28746Firmware, BMC & network fabricRFDSRegister File Data Samplingcurated

Impact

RFDS: stale data left in the integer, floating-point and vector register files after transient execution can be sampled by a local attacker, crossing the process, VM and enclave boundaries. Vector register files are where model activations and weights live during compute, so on an AI host this leaks the workload's actual data, not just pointers.

Who can reach it

Local authenticated code on an affected processor, including a co-tenant VM or container.

What to do

Mitigated by an Intel microcode update plus OS/hypervisor changes. Microcode for this class is normally shipped by your distribution as an early-loadable image, so you can deploy it with a package update and a reboot without waiting for an OEM BIOS release - that distinction is the difference between a week and a quarter. Verify after reboot by reading /sys/devices/system/cpu/vulnerabilities/ rather than assuming the package took effect. The kernel-side mitigation reuses the VERW buffer-clearing path, so a current kernel plus current microcode is the whole story; check the reg_file_data_sampling sysfs entry after reboot.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-28746 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.