Lukas Gerlach

**Nome do software vulnerável e versões afetadas** CPU T-Head XuanTie C910 no SoC TH1520 (versões afetadas não especificadas) CPU T-Head XuanTie C920 no SOPHON SG2042 (versões afetadas não especificadas) **Descrição** A vulnerabilidade permite que invasores sem privilégios gravem em locais arbitrários da memória física. Isso se deve a certas instruções nas CPUs T-Head XuanTie C910 e T-Head XuanTie C920. O número estimado de dispositivos potencialmente afetados em todo o mundo não foi especificado. Não há informações disponíveis sobre incidentes reais em que essa vulnerabilidade tenha sido explorada. **Recomendações** No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** AMD CPUs (affected versions not specified) **Description** The issue concerns improper or unexpected behavior of the INVD instruction in some AMD CPUs, potentially allowing an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU. This could lead to a loss of guest virtual machine (VM) memory integrity. The vulnerability, known as CacheWarp, affects AMD's Secure Encrypted Virtualization (SEV) technology, which is designed to protect against malicious hypervisors and reduce the attack surface of virtual machines by encrypting data. CacheWarp can be exploited to escalate privileges, execute remote code, and bypass authentication in virtual machines. The attack involves manipulating cache lines and exploiting the INVD instruction to alter the behavior of the CPU, potentially allowing attackers to gain control over virtual machines and access sensitive data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AMD processors (affected versions not specified) ARM processors (affected versions not specified) Intel processors (affected versions not specified) **Description** A potential power side-channel vulnerability may allow an authenticated attacker to monitor the CPU power consumption as the data in a cache line changes over time, potentially resulting in a leak of sensitive information. The vulnerability, known as Collide+Power, can be exploited to obtain confidential data, such as passwords or encryption keys. It is estimated that almost all modern processors are affected, including those from AMD, ARM, and Intel. However, the vulnerability is considered difficult to exploit, and the speed of data leakage is relatively low, making it unlikely to be used for attacks on end-users. The vulnerability can be used to enhance other software side-channel attacks, such as PLATYPUS and Hertzbleed. **Recommendations** As a temporary workaround, consider disabling the performance enhancement features in affected processors to minimize the risk of exploitation. Restrict access to sensitive data and confidential information to prevent potential leaks. Avoid using vulnerable processors for sensitive applications until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.