New vulnerability in Intel processors troubles users
According to the latest information, there is a new vulnerability found in Intel processors called CROSSTalk. This new Intel specific vulnerability allows you to run an application on one kernel and extract information from applications that run on other kernels. This works even on virtual machines, so it is a major danger for servers since you can access virtual machines that run on other cores.
All patches related to Specter, Meltdown, and similar vulnerabilities only target attacks within a single core, this vulnerability can still be exploited on up-to-date systems as it operates across multiple cores by exploiting vulnerabilities in the shared buffer that the processor. Since a single physical processor is used on many systems to host instances of multiple people or companies, this is dangerous since other people's instances can be accessed and their information extracted.
The study learned that a large number of processors are affected, including from Broadwell to Coffee Lake Refresh. The only unaffected processors are the Xeon Cascade Lake, which is the next-generation server CPUs, making most servers with older technologies vulnerable.Intel announced the release of a patch that is already available to partners, which delays the access of other cores to the buffer when a core uses RDRAND, RDSEED, or EGETKEY instructions. Also, if multiple cores execute these instructions, they will be executed in series instead of parallel, so that only one nucleus accesses at a time and data leakage is avoided.
Its advised to contact your motherboard manufacturer and ask for the latest motherboard updates to avoid any serious issue. Its still unclear if the upcoming patch will affect system performance as happened in previous cases with Intel's patches...