| Titolo | SonicBOOM riscv-boom V2.2.3-210-gd77c2c3f implemented in Chipyard (V1.3.0) Improper Protection of Physical Side Channels |
|---|
| Descrizione | RISC-V BOOM (V2.2.3-210-gd77c2c3f) out-of-order CPU cores were discovered to contain a microarchitectural side channel vulnerability. An attacker can exploit write port contention in the L1 data cache to leak secret data by measuring execution time. This vulnerability allows an attacker with local code execution privileges to infer sensitive information handled by other processes or security domains. |
|---|
| Fonte | ⚠️ https://github.com/fizz-is-on-the-way/vuls_cpu/tree/master/MSHRush |
|---|
| Utente | lcyf-fizz (UID 82520) |
|---|
| Sottomissione | 30/07/2025 10:35 (1 Anno fa) |
|---|
| Moderazione | 08/08/2025 22:24 (9 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 319297 [riscv-boom SonicBOOM fino a 2.2.3 L1 Data Cache rivelazione di informazioni] |
|---|
| Punti | 19 |
|---|