TONTOU attack bypasses Spectre v2 fixes to leak Linux password hashes

A new TONTOU “interrupt injection” attack can re-poison branch predictors after Spectre v2 defenses run, allowing unprivileged code to extract sensitive data from Linux kernel memory. An AMD kernel fix is already available, but shared hosts remain at risk until administrators deploy it and review workload isolation. Source

Les hele artikkelen hos kilden.