Vulnerability
Speculative Code Store Bypass
After code bytes are rewritten, the processor can still execute the old bytes transiently, which matters to JIT compilers.
- Also known as
- SCSB
- Kind
- Transient execution
- CVEs
- 2
- Published
- 2021
CVEs
| CVE | Name | Vendors | Published |
|---|---|---|---|
| CVE-2021-0089 | Speculative Code Store Bypass (SCSB) | Intel | 2021-06-09 |
| CVE-2021-26313 | Speculative Code Store Bypass (described below) | AMD | 2021-06-09 |
CVEs without a page of their own
The sources give these CVEs too few facts of their own (affected processors, a mitigation, a check) for a page; this is what they say.
CVE-2021-26313: Speculative Code Store Bypass
AMD's CVE for the same method: every supported processor, exploitable only through matching software; AMD advises an LFENCE between rewriting and executing code. AMD-SB-1003. Source. CVE record (2021-06-09).