Meltdown (security vulnerability) (English Wikipedia)

Sibert, Olin; Porras, Philip A.; Lindell, Robert (1995-05-08). "The Intel 80x86 Processor Architecture: Pitfalls for Secure Systems" (PDF). doi:10.1109/SECPRI.1995.398934. S2CID 923198. Archived from the original (PDF) on 2018-01-07. Retrieved 2018-01-09. {{cite journal}}: Cite journal requires |journal= (help)
Gruss, Daniel; Lipp, Moritz; Schwarz, Michael; Fellner, Richard; Maurice, Clémentine; Mangard, Stefan (2017). "KASLR is Dead: Long Live KASLR". Engineering Secure Software and Systems. Lecture Notes in Computer Science. Vol. 10379. pp. 161–176. doi:10.1007/978-3-319-62105-0_11. ISBN 978-3-319-62104-3.

fortune.com

Pressman, Aaron (2018-01-05). "Why Your Web Browser May Be Most Vulnerable to Spectre and What to Do About It". Fortune. Retrieved 2018-01-05.
"Understanding Those Alarming Computer Chip Security Holes: 'Meltdown' and 'Spectre'".

gruss.cc

"KASLR is Dead: Long Live KASLR" (PDF).

ibm.com

"Potential Impact on Processors in the POWER Family – IBM PSIRT Blog". IBM.com. 2018-01-25. Retrieved 2018-01-30.

intel.com

newsroom.intel.com

"Industry Testing Shows Recently Released Security Updates Not Impacting Performance in Real-World Deployments". Intel newsroom. 2018-01-04. Retrieved 2018-01-05.
Staff (2018-01-03). "Intel Responds To Security Research Findings". Intel. Retrieved 2018-01-04.

jaist.ac.jp

"P6 family microarchitecture". www.jaist.ac.jp.

kernel.org

cdn.kernel.org

Kroah-Hartman, Greg (2018-01-02). "Linux 4.14.11 Changelog". kernel.org.
Kroah-Hartman, Greg (2018-01-05). "Linux 4.9.75 Changelog". kernel.org.

kernelnewbies.org

"Linux_3.14". kernelnewbies.org. 2017-12-30. Retrieved 2018-01-18.

linuxglobal.com

Wheeler, Eric (2018-01-04). "Meltdown BUG: What about KVM/Xen/Docker/OpenVZ/LXC/PV-Xen/HyperV?". www.linuxglobal.com.

lkml.org

Lendacky, Tom. "[tip:x86/pti] x86/cpu, x86/pti: Do not enable PTI on AMD processors". LKML.org. Retrieved 2018-01-03.

lwn.net

Corbet, Jonathon (2017-11-15). "KAISER: hiding the kernel from user space". LWN. Retrieved 2018-01-03.
Corbet, Jonathon (2017-12-20). "The current state of kernel page-table isolation". LWN. Retrieved 2018-01-03.

macrumors.com

"Apple Confirms 'Meltdown' and 'Spectre' Vulnerabilities Impact All Macs and iOS Devices, Some Fixes Already Released". 2018-01-04.
"Apple Releases macOS High Sierra 10.13.2 Supplemental Update With Spectre Fix". Retrieved 2018-01-18.
"Apple Releases iOS 11.2.2 With Security Fixes to Address Spectre Vulnerability". Retrieved 2018-01-18.

meltdownattack.com

Lipp, Moritz; Schwarz, Michael; Gruss, Daniel; Prescher, Thomas; Haas, Werner; Fogh, Anders; Horn, Jann; Mangard, Stefan; Kocher, Paul; Genkin, Daniel; Yarom, Yuval; Hamburg, Mike. "Meltdown: Reading Kernel Memory from User Space" (PDF). MeltdownAttack.com. Retrieved 2019-02-25.
"Meltdown and Spectre: Which systems are affected by Meltdown?". meltdownattack.com. Retrieved 2018-01-03.

microsoft.com

support.microsoft.com

"Windows Client Guidance for IT Pros to protect against speculative execution side-channel vulnerabilities". support.microsoft.com. Retrieved 2018-01-04.
"Windows Server Guidance to protect against the speculative execution side-channel vulnerabilities". Microsoft Support.
"Important information regarding the Windows security updates released on 3 January 2018 and anti-virus software". Microsoft. Retrieved 2018-01-04.

cloudblogs.microsoft.com

"Understanding the performance impact of Spectre and Meltdown mitigations on Windows Systems". Microsoft. 2018-01-09.

ndss-symposium.org

Gras, Ben; Razavi, Kaveh; Bosman, Erik; Box, Herbert; Giuffrida, Cristiano (2017-02-27). "ASLR on the Line: Practical Cache Attacks on the MMU". Retrieved 2018-01-09.

netbsd.org

blog.netbsd.org

"Kernel ASLR on amd64". 2017. Retrieved 2017-10-16.

nytimes.com

Metz, Cade; Chen, Brian X. (2018-01-04). "What You Need to Do Because of Flaws in Computer Chips". The New York Times. Retrieved 2018-01-05.
Metz, Cade; Perlroth, Nicole (2018-01-03). "Researchers Discover Two Major Flaws in the World's Computers". The New York Times. ISSN 0362-4331. Retrieved 2018-01-03.

pcworld.com

Chacos, Brad (2018-01-04). "How to protect your PC from the major Meltdown and Spectre CPU flaws". PC World. Retrieved 2018-01-04.
Hachman, Mark (2018-01-09). "Microsoft tests show Spectre patches drag down performance on older PCs". PC World. Retrieved 2018-01-09.
"Intel CPU kernel bug FAQ: Fix for massive security flaw could slow down PCs and Macs". PCWorld. Retrieved 2018-01-04.
Hachman, Mark (2018-01-25). "Intel's plan to fix Meltdown in silicon raises more questions than answers – But what silicon?!! Be sure and read the questions Wall Street should have asked". PC World. Retrieved 2018-01-26.

phoronix.com

"Linux Gaming Performance Doesn't Appear Affected By The x86 PTI Work". Phoronix.com. Retrieved 2018-01-03.
"Initial Benchmarks Of The Performance Impact Resulting From Linux's x86 Security Changes". Phoronix. Retrieved 2018-01-04.
Larabel, Michael (2019-05-24). "Benchmarking AMD FX vs. Intel Sandy/Ivy Bridge CPUs Following Spectre, Meltdown, L1TF, Zombieload". Phoronix. Retrieved 2019-05-25.

raspberrypi.org

"Why Raspberry Pi Isn't Vulnerable to Spectre or Meltdown". Raspberry Pi. 2018-01-05. Retrieved 2018-01-30.

realworldtech.com

"Westmere Arrives". www.realworldtech.com.

redhat.com

access.redhat.com

"RHSA-2018:0008 – Security Advisory". RedHat announcements.
"RHSA-2018:0007 – Security Advisory". RedHat announcements.

reuters.com

Busvine, Douglas; Nellis, Stephen (2018-01-03). "Security flaws put virtually all phones, computers at risk". Reuters. Thomson-Reuters. Retrieved 2018-01-08.

rudebaguette.com

"Meltdown, Spectre: here's what you should know". Rudebaguette.com. 2018-01-08. Retrieved 2018-01-30.

schneier.com

Schneier, Bruce. "Spectre and Meltdown Attacks Against Microprocessors – Schneier on Security". Schneier.com. Retrieved 2018-01-09.

semanticscholar.org

api.semanticscholar.org

Sibert, Olin; Porras, Philip A.; Lindell, Robert (1995-05-08). "The Intel 80x86 Processor Architecture: Pitfalls for Secure Systems" (PDF). doi:10.1109/SECPRI.1995.398934. S2CID 923198. Archived from the original (PDF) on 2018-01-07. Retrieved 2018-01-09. {{cite journal}}: Cite journal requires |journal= (help)

pdfs.semanticscholar.org

Sibert, Olin; Porras, Philip A.; Lindell, Robert (1995-05-08). "The Intel 80x86 Processor Architecture: Pitfalls for Secure Systems" (PDF). doi:10.1109/SECPRI.1995.398934. S2CID 923198. Archived from the original (PDF) on 2018-01-07. Retrieved 2018-01-09. {{cite journal}}: Cite journal requires |journal= (help)

spectreattack.com

"Meltdown and Spectre". SpectreAttack.com. Retrieved 2018-01-30.
Staff (2018). "Meltdown and Spectre-faq-systems-spectre". Graz University of Technology. Retrieved 2018-01-03.

talesfromthedatacenter.com

"Solaris+SPARC is Meltdown (CVE-2017-5754) free – Tales from the Datacenter". Tales from the Datacenter. 2018-01-22. Retrieved 2018-01-23.

techcrunch.com

Coldewey, Devin (2018-03-15). "Intel announces hardware fixes for Spectre and Meltdown on upcoming chips". TechCrunch. Retrieved 2018-03-28.
Lynley, Matthew (2018-01-28). "Intel reportedly notified Chinese companies of chip security flaw before the U.S. government". TechCrunch. Retrieved 2018-01-28.

theguardian.com

Gibbs, Samuel (2018-01-04). "Meltdown and Spectre: 'worst ever' CPU bugs affect virtually all computers". The Guardian. Archived from the original on 2018-01-06. Retrieved 2018-01-06.

theregister.co.uk

"Kernel-memory-leaking Intel processor design flaw forces Linux, Windows redesign". The Register.
"Kernel-memory-leaking Intel processor design flaw forces Linux, Windows redesign". The Register.
"Kernel-memory-leaking Intel processor design flaw forces Linux, Windows redesign". The Register. Retrieved 2018-01-03.

theverge.com

"Intel says processor bug isn't unique to its chips and performance issues are 'workload-dependent'". The Verge. Retrieved 2018-01-04.
Warren, Tom (2018-03-15). "Intel processors are being redesigned to protect against Spectre – New hardware coming later this year". The Verge. Retrieved 2018-03-20.
"Intel's processors have a security bug and the fix could slow down PCs". The Verge. Retrieved 2018-01-03.
Warren, Tom (2018-01-03). "Microsoft issues emergency Windows update for processor security bugs". The Verge. Vox Media, Inc. Retrieved 2018-01-03.

timesys.com

Bhat, Akshay (2018-01-17). "Meltdown and Spectre vulnerabilities". timesys.com. Retrieved 2018-01-23. unless your product allows running 3rd party or WEB applications, we believe the device is not exposed to exploits

twitter.com

Gruss, Daniel (2018-01-03). "#FunFact: We submitted #KAISER to #bhusa17 and got it rejected". Archived from the original on 2018-01-08. Retrieved 2018-01-08 – via Twitter.
Ionescu, Alex (2017-11-14). "Windows 17035 Kernel ASLR/VA Isolation In Practice (like Linux KAISER)". Twitter. Archived from the original on 2018-01-06. Retrieved 2018-01-06.

ubuntu.com

wiki.ubuntu.com

"Information Leak via speculative execution side channel attacks (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754 aka Spectre and Meltdown)". Ubuntu Wiki. Retrieved 2018-01-04.

usenix.org

Lipp, Moritz; Gruss, Daniel; Spreitzer, Raphael; Maurice, Clémentine; Mangard, Stefan (2016-08-10). "ARMageddon: Cache Attacks on Mobile Devices" (PDF). Retrieved 2018-01-09.

web.archive.org

King, Ian; Kahn, Jeremy; Webb, Alex; Turner, Giles (2018-01-08). "'It Can't Be True.' Inside the Semiconductor Industry's Meltdown". Bloomberg Technology. Archived from the original on 2018-01-10. Retrieved 2018-01-10.
Staff (2018-01-26). "Meltdown and Spectre Vulnerabilities". Dell. Archived from the original on 2018-03-05. Retrieved 2018-01-26.
Sibert, Olin; Porras, Philip A.; Lindell, Robert (1995-05-08). "The Intel 80x86 Processor Architecture: Pitfalls for Secure Systems" (PDF). doi:10.1109/SECPRI.1995.398934. S2CID 923198. Archived from the original (PDF) on 2018-01-07. Retrieved 2018-01-09. {{cite journal}}: Cite journal requires |journal= (help)
Gruss, Daniel (2018-01-03). "#FunFact: We submitted #KAISER to #bhusa17 and got it rejected". Archived from the original on 2018-01-08. Retrieved 2018-01-08 – via Twitter.
Ionescu, Alex (2017-11-14). "Windows 17035 Kernel ASLR/VA Isolation In Practice (like Linux KAISER)". Twitter. Archived from the original on 2018-01-06. Retrieved 2018-01-06.
Gibbs, Samuel (2018-01-04). "Meltdown and Spectre: 'worst ever' CPU bugs affect virtually all computers". The Guardian. Archived from the original on 2018-01-06. Retrieved 2018-01-06.
"Who's affected by computer chip security flaw". Archived from the original on 2018-01-04. Retrieved 2018-01-04.

winbuzzer.com

"CERT: "Meltdown and Spectre" CPU Security Flaw Can Only Be Fixed by Hardware Replacement – WinBuzzer". 2018-01-04.

windowscentral.com

Thorp-Lancaster, Dan (2018-01-03). "Microsoft pushing out emergency fix for newly disclosed processor exploit". Windows Central. Retrieved 2018-01-04.

wired.com

"A Critical Intel Flaw Breaks Basic Security for Most Computers". Wired. 2018-01-03.
"A Critical Intel Flaw Breaks Basic Security for Most Computers". Wired. Retrieved 2018-01-04.

worldcat.org

Metz, Cade; Perlroth, Nicole (2018-01-03). "Researchers Discover Two Major Flaws in the World's Computers". The New York Times. ISSN 0362-4331. Retrieved 2018-01-03.

zdnet.com

Vaughan-Nichols, Steven J. (2018-01-11). "Major Linux distros have Meltdown patches, but that's only part of the fix". ZDNet. Retrieved 2018-01-16.
Tung, Liam (2018-01-18). "Meltdown-Spectre: Intel says newer chips also hit by unwanted reboots after patch – Intel's firmware fix for Spectre is also causing higher reboots on Kaby Lake and Skylake CPUs". ZDNet. Retrieved 2018-01-18.
Catalin Cimpanu (2018-11-14). "Researchers discover seven new Meltdown and Spectre attacks". ZDNet. Retrieved 2018-11-17.
Tung, Liam (2018-01-10). "Meltdown-Spectre: IBM preps firmware and OS fixes for vulnerable Power CPUs". ZDNet. Retrieved 2018-01-30.
Ranger, Steve. "Windows Meltdown and Spectre patches: Now Microsoft blocks security updates for some AMD based PCs". ZDNet. Retrieved 2018-01-09.
Tung, Liam. "Windows Meltdown-Spectre patches: If you haven't got them, blame your antivirus". ZDNet. Retrieved 2018-01-04.

Meltdown (security vulnerability) (English Wikipedia)

amazon.com

aws.amazon.com

amd.com

anandtech.com

androidauthority.com

apple.com

support.apple.com

movies.apple.com

opensource.apple.com

arm.com

developer.arm.com

arstechnica.com

augusta.com

chronicle.augusta.com

bbc.com

blackhat.com

bleepingcomputer.com

bloomberg.com

ccc.de

media.ccc.de

centos.org

lists.centos.org

cnet.com

cyber.wtf

cybereason.com

cyberus-technology.de

blog.cyberus-technology.de

cylance.com

debian.org

security-tracker.debian.org

dell.com

digitaltrends.com

doi.org

fortune.com

gruss.cc

ibm.com

intel.com

newsroom.intel.com

jaist.ac.jp

kernel.org

cdn.kernel.org

kernelnewbies.org

linuxglobal.com

lkml.org

lwn.net

macrumors.com

meltdownattack.com

microsoft.com

support.microsoft.com

cloudblogs.microsoft.com

ndss-symposium.org

netbsd.org

blog.netbsd.org

nytimes.com

pcworld.com

phoronix.com

raspberrypi.org

realworldtech.com

redhat.com

access.redhat.com

reuters.com

rudebaguette.com

schneier.com

semanticscholar.org

api.semanticscholar.org

pdfs.semanticscholar.org

spectreattack.com

talesfromthedatacenter.com

techcrunch.com

theguardian.com

theregister.co.uk

theverge.com

timesys.com

twitter.com

ubuntu.com

wiki.ubuntu.com

usenix.org

web.archive.org

winbuzzer.com