A new vulnerability named "Indirector" has been discovered in Intel CPUs, affecting models like Raptor Lake and Alder Lake. This flaw allows attackers to exploit the Indirect Branch Predictor (IBP) and Branch Target Buffer (BTB), components that predict the target addresses of branch instructions. By doing so, they can launch highly precise branch target injection attacks, potentially hijacking the control flow of a program and causing it to execute arbitrary code, leading to data leaks. Intel was notified in February 2024 and advised other vendors about the issue. It confirmed that existing mitigation strategies are effective against this vulnerability, suggesting no new measures are needed. However, it recommends using the Indirect Branch Predictor Barrier (IBPB) more aggressively and enhancing the Branch Prediction Unit (BPU) design with more complex tags, encryption, and randomization.
https://indirector.cpusec.org/index_files/Indirector_USENIX_Security_2024.pdf
https://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/technical-documentation/indirect-branch-predictor-barrier.html
#cybersecurity #intel #vulnerability #cpu #indirector #ibp #btb #ibpb