CPU ã®é大ãªèå¼±æ§ãMeltdownãããã³ãSpectreããå©ç¨ããå®éã®æ»æã¯ã¾ã 確èªããã¦ãã¾ããããããããProof of Conceptï¼æ¦å¿µå®è¨¼ãPoCï¼ããå ¬éããã¦ããããããã®èå¼±æ§ãçãæ»æã®å®é¨ã«ãããã®ã¨æ¨æ¸¬ãããä¸å¯©ãªãã¡ã¤ã«ã®æ¤åºãå ±åããã¦ãã¾ãããã®ãããªç¶æ³ãè¸ã¾ããã¨ãåé¡ã®èå¼±æ§ãå©ç¨ããæ»æã確èªãããã®ãæéã®åé¡ã¨è¨ã£ã¦ããã§ããããMeltdown ããã³ Spectre ã®å½±é¿ç¯å²ã¯åºãã1995 年以éã«ä½æããã PC ãå½±é¿ãåããã¨è¨ããã¦ãã¾ããã¾ãããã®2æã«ã¯ããã¾ã§èªèããã¦ãã以å¤ã®æ»ææ¹æ³ã確èªãããMeltdownPrimeãããã³ãSpectrePrimeãã¨å½åããããªã©ãæ»æå±éºæ§ãé«ã¾ã£ã¦ãã¾ããä¾µå ¥ããç°å¢ã§ã¡ã¢ãªä¸ã®ãã¼ã¿ã¸ã®ä¸æ£ã¢ã¯ã»ã¹ãå¯è½ã¨ãããããã®èå¼±æ§ã¯éè¦æ å ±ã®çªåãç®çã¨ããæ»æã§ä½¿ç¨
Microsoftã¯1æ¥ãIntelããã»ããµã¼ã®Spectre/Meltdownèå¼±æ§ãä¿®æ£ãããã¤ã¯ãã³ã¼ãã¢ãããã¼ããMicrosoft Updateã«ã¿ãã°ã§æä¾éå§ãã(Windows Experience Blogã®è¨äºã KB4090007ã Neowinã®è¨äºã The Vergeã®è¨äº)ã å½åã¯ç¬¬6ä¸ä»£Coreããã»ããµã¼ Skylake H/Sããã³ç¬¬6ä¸ä»£Core mããã»ããµã¼ Skylake U/Y/Skylake U23eã対象ã§ãCVE-2017-5715(Spectre Variant 2)ãä¿®æ£ãããã¤ã¯ãã³ã¼ãã¢ãããã¼ããå«ã¾ãããIntelããMicrosoftã«æä¾ãã次第ã追å ã®ãã¤ã¯ãã³ã¼ãã¢ãããã¼ããéææä¾ããäºå®ã ã¨ãããç¾å¨ã®ã¨ããæ´æ°ããã°ã©ã ã対å¿ããWindowsãã¼ã¸ã§ã³ã¯Windows 10 ãã¼ã¸ã§ã³1709(Fall
Linuxã«ã¼ãã«ã®æ°ãã¼ã¸ã§ã³ãLinux 4.15ããç±³å½æé1æ28æ¥ã«ãªãªã¼ã¹ããããMeltdownãã¨ãSpectreãã¨ããããã»ããµèå¼±æ§ã¸ã®å¯¾çãé²ãã§ãã¦ããã¨ã¯ããããã¹ã¦ã®å¯¾çä½æ¥ãå®äºããããã§ã¯ãªãã¨ããã Linuxã«ã¼ãã«ã®çã¿ã®è¦ªã§ããLinus Torvaldsæ°ã¯ãããã®ããã»ããµèå¼±æ§ã«ã¤ãã¦è¯ããã¥ã¼ã¹ã¨æªããã¥ã¼ã¹ãããã¨ãã¦ãããè¯ããã¥ã¼ã¹ã¯ãLinux 4.15ã®ãªãªã¼ã¹ã«è³ãã¾ã§ã®éã®ãããç©ããã§ãå°è¦æ¨¡ãªå¤æ´ã®ã¿ã§ãããæçµæ®µéã§ãããã¯ãå¼ãèµ·ãããã¨ããªãããã¾ãã¾ãªåé¡ã«å¯¾ããã¡ãã£ã¨ããä¿®æ£ã®ã¿ã ã£ããã¨ãããã®ã ããã®ä¸æ¹ãæªããã¥ã¼ã¹ã¯ã¨ããã¨ããSpectre/Meltdownã¸ã®å¯¾å¦ããå®äºãããããã§ã¯ãªããã¨ãããã®ã ã Torvaldsæ°ã¯Linuxã«ã¼ãã«ã®ã¡ã¼ãªã³ã°ãªã¹ãï¼LKMLï¼ã§ã4.15ã«åããä½æ¥ã®
Amazon Web Servicesï¼AWSï¼ã¯ããSpectreãããã³ãMeltdownãã¨åä»ããããCPUã®èå¼±æ§ã«é¢ãã¦å社ã®å¯¾å¿ãã¾ã¨ããWebãã¼ã¸ãProcessor Speculative Execution Research Disclosureãã«ããã¦ããã§ã«èå¼±æ§å¯¾çãæ¸ãã ãã¨ãå ±åãã¦ãã¾ãã AWSãããããç¹è¨ãã¼ã¸ãè¨ããã®ã¯çãããã¨ã§ãæ¬ä»¶ã®éè¦æ§ã¨ç·æ¥æ§ã®é«ããããããã¾ãã ãã ãGoogleãèå¼±æ§ã®è©³ç´°ãªå ±åã¨å¯¾çã®çµç·¯ãªã©ã詳細ã«ããã°ã§é示ããã®ã«å¯¾ããAWSã®æ å ±æä¾ã¯å®åçã§ãã£ãããããã®ã«ãªã£ã¦ãã¾ãã Amazon EC2ã®ã¯ã¼ã¯ãã¼ãã«æ§è½ä½ä¸ã¯è¦ãããªã ä¸è¨ã¯Amazon EC2ã«é¢ããå ±åãå¼ç¨ãããã®ã§ãããã¹ã¦ã®å¯¾çãæ¸ãã ã¨å ±åããã¦ãã¾ããã¾ããOSã®ã¢ãããã¼ããæ¨å¥¨ããã¦ãã¾ãã All instances
Googleã¯Spectreã¨Meltdownã®å¯¾çãæ¨å¹´6æã«éå§ã12æã«ã¯å®äºãã¦ãããæ§è½ä½ä¸ã®å ±åã¯ãªã ã¤ã³ãã«ãAMDãARMãªã©ãç¾å¨ä½¿ããã¦ããã»ã¼ãã¹ã¦ã®CPUã«å½±é¿ããæ·±å»ãªèå¼±æ§ãSpectreãã¨ãMeltdownãã表é¢åããåé¡ã«ã¤ãã¦ãGoogleã¯ãã§ã«å年以ä¸åã2017å¹´6æã«ãã®èå¼±æ§ã¸ã®å¯¾çãéå§ãã12æã«ã¯å®äºãã¦ãããã¨ãæããã«ãã¾ããã ç¾æç¹ã§ã¯å¤ãã®å ±éãªã©ã«ããã¦ããã®èå¼±æ§ã«å¯¾å¦ããããã®ä¿®æ£ãè¡ãã¨CPUã®æ§è½ä½ä¸ãå¼ãèµ·ããå¯è½æ§ããããã¨ãææããã¦ãã¾ããã¾ãã¤ã³ãã«ã¯èå¼±æ§å¯¾çã®ããã®ãã¡ã¼ã ã¦ã§ã¢ãé©ç¨ããã¨ããã¹ã¯ãããPCåãã®ãã³ããã¼ã¯ã«ããã¦ã6ãã¼ã»ã³ãããã以ä¸ã®æ§è½ä½ä¸ã®å¯è½æ§ãããã¨çºè¡¨ãã¦ãã¾ãï¼ãµã¼ãç¨éã«ãããæ§è½ä½ä¸ã®å½±é¿ã«ã¤ãã¦ã¯ã¾ã ã¤ã³ãã«ããçºè¡¨ããã¦ãã¾ããï¼ã ã¨ãããGoogleã¯
å··ã§ã¯Intel, AMD, ARMãå·»ãè¾¼ãã CPUã®ãã° "Meltdown", "Spectre" ã話é¡ã§ãã ãããã®åé¡ãå 容ãèªã¿é²ãã¦ããã¨ãã³ã³ãã¥ã¼ã¿ã¢ã¼ããã¯ãã£ã«ãããéè¦ãªè¦ç´ ãå¤ãå«ãã§ãããã¨ãåãã£ã¦æ¥ã¾ããã ã¤ã¾ãããã®CPUã®ã»ãã¥ãªãã£åé¡ãèªã¿è§£ãã¦ããã¨ç¾ä»£ã®ãã¤ã¯ãããã»ããµãæã¤ãæ§è½åä¸ã®ããã®ãããªãæ©è½è¿½å ã®ä¸ç«¯ãè¦ãã¦ããã®ã§ã¯ãªããã¨æããGoogle, Intelã®æç®ãèªã¿è§£ãã¦ã¿ããã¨ã«ãã¾ããã ããç§ã¯ã»ãã¥ãªãã£ã®å°é家ã§ã¯ããã¾ããããéå»ã«ãã¹ã¯ãããPCåãã®ãããªå¤§è¦æ¨¡ãªCPUè¨è¨ã«åå ãããã¨ãããã¾ããã ããã¾ã§ã³ã³ãã¥ã¼ã¿ã¢ã¼ããã¯ãã£ã«æ¯è¼çè¿ãå ´æã«ãã人éã¨ãã¦ããã®åé¡ã®æ¬è³ªã¯ã©ãã«ããã®ããå¯è½ãªéãèªã¿è§£ãã¦ãããç¾ä»£ã®ãã¤ã¯ãããã»ããµãæã¤é«æ§è½ãã¤é«æ©è½ãªå é¨å®è£ ã«ã¤ãã¦è§£ãæããã¦ãã
æ¥æ¬ã§ã¯æ¾ã®å ãæãããæããªããã®å ã«é¨ãã¨ãªã£ãã¤ã³ãã«è£½ããã»ããµã¼ã®èå¼±æ§ã«é¢ããå ±éã ãã¨ãã¨ã¯2017å¹´ã®æ©ãææã«çºè¦ããããã®ã§ããã®åé¡ã®å¤§ããããã£ã¦Googleã§ã»ãã¥ãªãã£ã¼åé¡ã®å¯¾å¦ãè¡ãªãProject Zeroãã¼ã ãæ¨å¹´ãã主è¦ãªCPUãã³ãã¼ãOSãã³ãã¼ã«é£çµ¡ãè¡ãªã£ã¦ãããä»å¹´ã®æ©ãææã«å¯¾å¿ãå«ããã¢ãã¦ã³ã¹ãè¡ãããäºå®ã§ãã£ãã ãã ãã®æ å ±ãããªãã£ã·ã£ã«ã¢ãã¦ã³ã¹ã®åã«æµåºãããå½åã¯ãã·ã¢ã®4chanã§å ±ãããããããã®ã ããå½è©²ã¹ã¬ããã¯è¦ã¤ããããªãã£ãããã åºãå ±ããããããã«ãªã£ããã£ããã¯ãThe Registersã®è¨äºã§ããããããåãã¦ä¸»è¦ãªãã³ãã¼ã¯ããããèªç¤¾ã®è£½åã«ã¤ãã¦ã®ã¢ãã¦ã³ã¹ãç·æ¥ã«å ¬éãã¦ããã ä¸è¦§ã§ç¤ºãã¨ã以ä¸ã®ããã«ãªããä»ã«OSãã³ãã¼ãã¯ã©ã¦ããããã¤ãã¼ãªã©ãç¸æ¬¡ãã§ã¬ãã¼ããåºãã¦ãããã¾ããª
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
å¦çãå®è¡ä¸ã§ã
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}