LVI – Hijacking Transient Execution with Load Value Injection (INTEL-SA-00334)

We were asked to make a trailer for the #LVI @IEEESSP paper. Here it is 😉

"We turn #Meltdown around."https://t.co/SgdtYLUgwlhttps://t.co/Roo754s6GThttps://t.co/45bMdpuiBB

cc @jovanbulck @danielmgmi @misc0110 @mlqxyz pic.twitter.com/pLVwPYVFda

— Daniel Gruss (@lavados) March 10, 2020

We present Load Value Injection #LVI: a new transient-execution attack class; defeats defenses; turns around #Meltdown #Foreshadow #ZombieLoad #RIDL #Fallout to *inject* attacker data into victim loads. https://t.co/8SIt1xhICm cc @danielmgmi @mlqxyz @misc0110 @lavados @IEEESSP pic.twitter.com/Nvbr5PgHgP

— Jo Van Bulck (@jovanbulck) March 10, 2020

After a reasonably long embargo, #LVI, a whole new class of transient execution attacks, is finally out. It is as always fun to work with @jovanbulck @mlqxyz @misc0110 @lavados, to appear at @IEEESSP 2020. https://t.co/X0gAx33YsR

— Daniel Moghimi (@danielmgmi) March 10, 2020

Intel now officially calls these attacks (#LVI, #Spectre, #Meltdown, #ZombieLoad, …) transient execution attacks, and not speculative execution side-channel attacks anymore https://t.co/XdhWn5KZcr

— Michael Schwarz (@misc0110) March 10, 2020