Intel processors (bounds check bypass store): Spectre 1.1: speculative stores can overflow a bounds-checked buffer

Impact

Spectre 1.1: speculative stores can overflow a bounds-checked buffer, letting an attacker write speculatively into structures that steer later speculation. Extends Spectre v1 from a read primitive to a write-and-redirect one inside a sandbox.

Who can reach it

Local code execution, particularly inside interpreters and JITs handling untrusted input.

What to do

Software mitigation in compilers, kernels and runtimes rather than microcode. Take kernel and runtime updates; reboot for the kernel component.

References