SecurityThe Hacker Newsabout 2 hours ago
Spectre-v2 BTR Attack Leaks Linux Root Hashes
4 min read
Researchers at VU Amsterdam and Scuola Superiore Sant'Anna disclosed Branch Target Reuse, a Spectre-v2 variant exploiting stale branch predictor entries in JIT engines. It affects Firefox's SpiderMonkey, Oracle GraalVM and the Linux cBPF JIT, leaking root password hashes from patched Intel systems in minutes. Linux kernel mitigations are merged as CVE-2026-64507 and CVE-2026-64508; most modern Intel, AMD and Arm CPUs are vulnerable.
Level
Hype check
Tap to vote and see what everyone thinks.