MeltdownPrime and SpectrePrime are new versions of some vulnerabilities discovered based on existing exploits in Intel and ARM processors, the initial ones being disclosed last month. Although Intel and computer manufacturers have promised quick fixes for these vulnerabilities, here we are now talking about new ones that have names. MeltdownPrime and SpectrePrime.
MeltdownPrime and SpectrePrime can extract confidential information from computer memory through exploitation initial vulnerabilities of Intel and ARM processors. Although it is possible that software updates will block MeltdownPrime and SpectrePrime in the first instance, due to the architecture of the processors, the underlying problems may remain.
Those who discovered MeltdownPrime and SpectrePrime claim that the processor architecture makes it impossible to solve the vulnerabilities without seriously changing it. Without Intel and ARM changing much of the processor architecture, vulnerabilities like MeltdownPrime and SpectrePrime could appear in the future, even despite the software patches.
"In short, the team has discovered new ways for malware to extract sensitive information, such as passwords and other secrets, from a vulnerable computer's memory by exploiting the Meltdown and Specter design blunders in modern processors. The software mitigations being developed and rolled out to thwart Meltdown and Specter attacks, will likely stop these new exploits. Crucially, however, changes to the underlying hardware probably won't: that is to say, whatever Intel and its rivals are working on right now to rid their CPU blueprints of these vulnerabilities may not be enough."
MeltdownPrime and SpectrePrime are basically proof that the problems of Intel and ARM processors are much bigger than they seem at first glance. Processor and computer manufacturers continue to apply a "bandage" to these problems, but the basic ones will not be solved by anyone soon, so we'd better be careful.
