New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses

Researchers have discovered a new variant of the Spectre CPU vulnerability, known as Branch Target Reuse, which affects Just-In-Time engines in web browsers, language runtimes, and operating system kernels across multiple CPU vendors. This new Spectre-v2 variant, referred to as BTR, has been identified by academics from VUSec and Scuola Superiore Sant'Anna. The vulnerability is notable for its ability to leak Linux memory despite existing defenses. The BTR attack targets JIT engines, which are present in various systems. The discovery was made by a group of academics who have disclosed details of the vulnerability. The affected systems span multiple CPU vendors, making it a widespread issue.