This is the new vulnerability of Intel processors called LazyFP

We told it a few days ago on this page. New bugs had been detected in Intel processors, similar to those found in the Specter style. The positive part is that this time the detection had been fast, and Intel already had a first solution to these vulnerabilities and had made it known to its customers.

Today the details of this new ruling are known. This new vulnerability is known as LazyFP and would allow the attacker to access confidential data, such as cryptographic keys. Some Amazon and Cyberus Technology workers would have been the ones who found the problem and raised the alarm. 

Apparently Intel would have negotiated that the publication of the news to the media be delayed at least until August, as they work hard to find a solution. Some rumors about the vulnerability would have caused the communication of the news, so that Intel could work more quickly.

LazyFP focuses on using the FPU unit and processing logsr. To enable multitasking, the FPU needs to store information to switch tasks. Information in this state could be vulnerable. This information could remain there, until other information replaces it.

If we consider the opinion of Intel, this intrusion has a severity rated as moderate. It affects Intel Core-based processors, but only specific models. It does not mention any more information, not even which operating systems are most vulnerable.

Although it is unknown which Macs may be affected, all computers mount Intel. Plus, Intel processors have been in the Mac for more than a decade. Apple so far has not ruled on the matter, when it usually announces the errors detected and how it corrects them.

However, In each update of macOS they announce fixes of errors and problems that affect security. Therefore, it cannot be ruled out that Apple is fixing the problem without explicitly talking about it.


Leave a Comment

Your email address will not be published. Required fields are marked with *

*

*

  1. Responsible for the data: Miguel Ángel Gatón
  2. Purpose of the data: Control SPAM, comment management.
  3. Legitimation: Your consent
  4. Communication of the data: The data will not be communicated to third parties except by legal obligation.
  5. Data storage: Database hosted by Occentus Networks (EU)
  6. Rights: At any time you can limit, recover and delete your information.