An MDS reading list
We contemplated putting together an LWN article on the "microarchitecturaldata sampling" (MDS) vulnerabilities, as we've done for pastspeculative-execution issues. But the truth of the matter is that it'sreally more of the same, and there is a lot of material out there on thenet already. So, for those who would like to learn more, here's a list ofresources.
- This page from the kernel documentation contains a fairly detailed description of the problem and this page has mitigation information.
- ZombieLoadAttack.com describes the ZombieLoad MDS attack and, in particular, contains this paper [PDF] from Michael Schwarz et al. with the details.
- mdsattacks.com holds academic papers on the Fallout [PDF] (Marina Minkin et al.) and RIDL [PDF] (Stephan van Schaik et al.) attacks.
- Jon Masters has written an overview article complete with a three-minute video on the vulnerabilities and their exploits. For those wanting more Masters, there is also a longer video that goes deeper.
- Here is Intel's "deep dive" into the MDS vulnerabilities.
- Cyberus Technology has put up an overview article that discusses some of the possible attacks enabled by the MDS vulnerabilities.