Affected Systems
Intel CPUs (Cascade Lake Refresh, Arrow Lake) and AMD Zen 1-4 processors running Linux. AMD Safe-RET mitigation vulnerable; Intel eIBRS/BHI defenses also affected. Requires local code execution on shared Linux systems. AMD-SB-7061 bulletin published; no CVE assigned.
Exploitation Status
Proof-of-concept demonstrated by MIT CSAIL researchers. On AMD Zen 2 with Linux 6.14 and all Spectre v2 mitigations enabled, exploit leaked kernel memory at 5.47 bytes/sec with 91.97% accuracy, successfully reading /etc/shadow in 5/10 attempts. Requires unprivileged local access; no active exploitation reported in the wild.
Business Impact
Attackers with local unprivileged access on multi-tenant Linux systems (shared hosting, cloud instances, HPC clusters) can leak arbitrary kernel memory including password hashes. AMD issued patch via Linux kernel commit "x86/bugs: Make Safe-RET robust against interrupt injection" (June 2, 2026). Intel considers no mitigation necessary, citing existing guidance. No CVE assigned, complicating vulnerability tracking. Administrators cannot easily verify patch status without checking specific kernel commit or /sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow.
Urgency
🟡 Within a week
Recommended Actions
- Update Linux kernel to version containing commit 'x86/bugs: Make Safe-RET robust against interrupt injection' (June 2, 2026) on AMD Zen 1-4 systems; verify via kernel changelog or /sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow
- Prioritize patching multi-tenant Linux environments (shared hosting, cloud instances, HPC clusters) where untrusted users have local code execution
- Monitor AMD security bulletin AMD-SB-7061 for updates on affected processor models and additional guidance
- Review access controls on shared Linux systems to limit local code execution by untrusted users until patching is complete
- For Intel systems, assess risk based on environment; monitor INTEL-SA-00598 for guidance updates, though Intel currently considers no mitigation required