Vulnerability
Special Register Buffer Data Sampling
The results of RDRAND, RDSEED and SGX's EGETKEY pass through a buffer shared by all cores, from which MDS techniques on another core can sample them.
- Also known as
- SRBDS, CrossTalk
- Kind
- Data sampling
- CVEs
- 2
- Published
- 2020–2022
- Linux reports it in
srbds
CVEs
| CVE | Name | Vendors | Published |
|---|---|---|---|
| CVE-2020-0543 | Special Register Buffer Data Sampling (SRBDS, CrossTalk) | Intel | 2020-06-15 |
| CVE-2022-21127 | Special Register Buffer Data Sampling update (SRBDS update) (described below) | Intel | 2022-06-15 |
How to check a machine
On Linux, /sys/devices/system/cpu/vulnerabilities/srbds reports it; the kernel’s documentation lists the lines it can hold.
CVEs without a page of their own
The sources give these CVEs too few facts of their own (affected processors, a mitigation, a check) for a page; this is what they say.
CVE-2022-21127: Special Register Buffer Data Sampling update
An update to SRBDS: the earlier microcode left some special register reads unprotected; Intel's list covers both CVEs in one column. INTEL-SA-00615. Source. CVE record (2022-06-15).