MEDIUMVulnerability
Global

New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs

·Source: The Hacker News

Updated:

Executive Summary

An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run. MIT CSAIL researchers Daniël Trujillo and Mengjia Yan named the technique INTERRUPT INJECTION. On an AMD Zen 2 machine running Linux 6.14 with every default Spectre v2 mitigation on,

Analysis

An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run. MIT CSAIL researchers Daniël Trujillo and Mengjia Yan named the technique INTERRUPT INJECTION. On an AMD Zen 2 machine running Linux 6.14 with every default Spectre v2 mitigation on,
Source Attribution

Originally published by The Hacker News on Aug 6, 2026.

Related Threats

HIGHVulnerabilityNEW

NVD HIGH: CVE-2026-53985 — Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vuln...

Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's service_control event handler that allows any unauthenticated network peer to forcibly terminate the ground-station process by sending a single restart_service command. Attackers can connect to the Socket.IO server on port 7000 without credentials due to disabled authentication enfor

CVE-2026-53985
NIST NVD
HIGHVulnerabilityNEW

NVD HIGH: CVE-2026-53977 — OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows u...

OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server process by sending a POST request to the /api/system/shutdown endpoint, which is registered before the authentication middleware in the Express route handler chain. Attackers can exploit the route registration order in bootstrap-runtime.js to reach the shutdown ha

CVE-2026-53977
NIST NVD
HIGHVulnerabilityNEW

NVD HIGH: CVE-2026-43622 — llama.cpp builds b1886 through b7445 contain a double free vulnerability in the ...

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates memory using malloc() while free_1batch() deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management mismatch to cause denial of service through process crashes or potentially achieve arbitrary code

CVE-2026-43622
NIST NVD