L1TF Reloaded

3 months ago

The Rain research project demonstrates how a malicious virtual machine can exploit transient execution vulnerabilities to leak data from the host and other VMs.
The repository includes the L1TF Reloaded exploit and instructions for reproducing results.
Key resources include an S&P'26 paper, project page, blog posts, and public disclosures.
L1TF Reloaded combines L1TF and (Half-)Spectre vulnerabilities to bypass common mitigations like L1d flushing and core scheduling.
The exploit was tested on AWS and Google Cloud, successfully leaking a private TLS key from an Nginx webserver on the same host.
The repository is organized into directories for dependencies, headers, scripts, setup, and source code.
Vulnerable systems include Intel CPUs affected by L1TF with kernel versions before specific stable releases.
Recommendations include deploying additional mitigations against L1TF Reloaded and other microarchitectural attacks.

Hasty Briefsbeta