New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs

Researchers have disclosed a novel 'Interrupt Injection' attack that allows an unprivileged Linux program to bypass existing Spectre v2 defenses on Intel and AMD CPUs. The attack exploits a timing gap between a processor's branch predictor sanitization and its use by the kernel, enabling the re-poisoning of the predictor. This vulnerability, which requires only local code execution, could allow attackers to leak arbitrary kernel memory, posing a significant risk to shared systems running affected processors.