"Intel Faces 'Downfall' Bug Lawsuit"

Intel is facing a class-action lawsuit allegedly for the way it handled data-leaking bugs in its CPUs. Five representative plaintiffs allege in a 112-page filing with the San Jose Division of the United States District Court's Northern District of California that the chip giant knew about faulty instructions that enabled issues like the recent "Downfall" bug half a decade before it released any fix. Downfall is a vulnerability, tracked as CVE-2022-40982 with a CVSS score of 6.5, in Intel's sixth to eleventh-generation CPUs. An attacker could exploit a vulnerable instruction used by processors for speculative execution to gain access to privileged information from other users in a shared computing environment. This article continues to discuss the Downfall bug and the lawsuit Intel is facing.

Dark Reading reports "Intel Faces 'Downfall' Bug Lawsuit"

Submitted by grigby1