Researchers find 8 new CPU vulnerabilities Intel responds to release patches to fix vulnerabilities

The German computer magazine "c't" reported on Thursday that researchers found eight new vulnerabilities in the computer CPU. These vulnerabilities are similar to Metldown and Spectre.

The magazine also said that Intel is preparing to release patches and fix vulnerabilities. Some of ARM's chips are also affected. As for whether AMD chips have the same problems, researchers are investigating. "c't" does not disclose the source of the information, because the researchers will give priority to the company, and then disclose their findings after the company finds the patch.

In January, researchers discovered the Meltdown and Spectre vulnerabilities, and Google Project Zero was one of the first teams to discover. This time, one of the vulnerabilities was also discovered by Project Zero. Since it was forbidden to be disclosed within 90 days, it was not possible to announce its findings until May 7.

The Intel representative declined to comment on the vulnerability described by the German magazine. In the official website statement, Intel said it is working with customers, partners, other chip vendors, researchers, and once the problem is confirmed, it will find ways to ease, the whole process involves the CVE number retention block. The statement said: "We believe that collaborative disclosure has great value. In the process of mitigation, we will disclose any potential problems once they are discovered."

For the newly discovered vulnerabilities, c't magazine did not disclose too much detail. When Spectre and Meltdown appeared, the researchers said that there might be more similar vulnerabilities that need to be patched.

Yuriy Bulygin, CEO of hardware security company Eclypsium and former Intel security researcher, said: "Look at the impact of Metldown and Spectre, new vulnerabilities may trigger a new round of upgrade cycles, long time, painful process, even It may involve performance and stability issues. Patching hardware is a tricky task, and hopefully the process can be made simpler under the guidance of Metldown and Spectre."

Briggin also said that in the real world, no hackers have used Spectre and Meltdown to launch attacks, but similar attacks have become a hot new field of research. Some ghosts may have begun to study new attacks.