LVI – Hijacking Transient Execution with Load Value Injection (INTEL-SA-00334)

We present Load Value Injection #LVI: a new transient-execution attack class; defeats defenses; turns around #Meltdown #Foreshadow #ZombieLoad #RIDL #Fallout to *inject* attacker data into victim loads. https://t.co/8SIt1xhICm cc @danielmgmi @mlqxyz @misc0110 @lavados @IEEESSP pic.twitter.com/Nvbr5PgHgP

— Jo Van Bulck (@jovanbulck) March 10, 2020

After a reasonably long embargo, #LVI, a whole new class of transient execution attacks, is finally out. It is as always fun to work with @jovanbulck @mlqxyz @misc0110 @lavados, to appear at @IEEESSP 2020. https://t.co/X0gAx33YsR

— Daniel Moghimi (@flowyroll) March 10, 2020

Intel now officially calls these attacks (#LVI, #Spectre, #Meltdown, #ZombieLoad, …) transient execution attacks, and not speculative execution side-channel attacks anymore https://t.co/XdhWn5KZcr

— Michael Schwarz (@misc0110) March 10, 2020