Intel: Security flaw is not unique to our CPUs

Posted on Wednesday, January 03 2018 @ 21:28 CET by Thomas De Maesschalck
Intel logo
Yesterday reports started hitting the tech press about a major vulnerability in Intel's processors. The flaw reportedly gives attackers direct access to the kernel memory areas. Most of the details about the vulnerability are kept under tight wraps, but the speed and the significance of the changes that are being made to Linux and Windows suggest this is indeed a very important problem. The problem can't be fixed via CPU microcode updates and requires low-level operating system changes.

Intel just send out a press release to address the rumors. Earlier today, Intel's share price fell over 6.5 percent but it bounced back and is now down 3.95 percent. One significant line in the press release is Intel's statement that "many different vendors' processors" are susceptible to these exploits. The statement also reveals Intel is working with AMD, ARM and several operating system vendors to address the issue. Outside of this press release from Intel, there's no evidence so far that AMD CPUs are vulnerable to a similar attack.

Furthermore, Intel stresses that any performance impact will be workload-dependent. The chip giant claims the average computer user will not notice a significant change. Intel also promises performance impacts will be mitigated over time.
Intel and other technology companies have been made aware of new security research describing software analysis methods that, when used for malicious purposes, have the potential to improperly gather sensitive data from computing devices that are operating as designed. Intel believes these exploits do not have the potential to corrupt, modify or delete data.

Recent reports that these exploits are caused by a "bug" or a "flaw" and are unique to Intel products are incorrect. Based on the analysis to date, many types of computing devices -- with many different vendors' processors and operating systems -- are susceptible to these exploits.

Intel is committed to product and customer security and is working closely with many other technology companies, including AMD, ARM Holdings and several operating system vendors, to develop an industry-wide approach to resolve this issue promptly and constructively. Intel has begun providing software and firmware updates to mitigate these exploits. Contrary to some reports, any performance impacts are workload-dependent, and, for the average computer user, should not be significant and will be mitigated over time.

Intel is committed to the industry best practice of responsible disclosure of potential security issues, which is why Intel and other vendors had planned to disclose this issue next week when more software and firmware updates will be available. However, Intel is making this statement today because of the current inaccurate media reports.

Check with your operating system vendor or system manufacturer and apply any available updates as soon as they are available. Following good security practices that protect against malware in general will also help protect against possible exploitation until updates can be applied.

Intel believes its products are the most secure in the world and that, with the support of its partners, the current solutions to this issue provide the best possible security for its customers.


About the Author

Thomas De Maesschalck

Thomas has been messing with computer since early childhood and firmly believes the Internet is the best thing since sliced bread. Enjoys playing with new tech, is fascinated by science, and passionate about financial markets. When not behind a computer, he can be found with running shoes on or lifting heavy weights in the weight room.



Loading Comments