saferet

MIT's TONTOU attack reaches protected Linux memory through a two-instruction window

CSAIL researchers timed an interrupt to land inside the gap AMD's saferet defense leaves open, then pulled the root password file off a current Linux kernel. AMD has shipped a mitigation. Intel's picture is messier.