Intel ya no siente lo duro, sino lo tupido (Otro Critical Flaw, LAZYFP)

www.tomshardware.com/news/intel-processors-lazyfp-speculative-execution,37302.html

Intel CPUs Affected By Yet Another Speculative Execution Flaw

Intel hadn’t even properly finished releasing patches to OEMs for the first generation of Spectre flaws before rumors about eight more Intel CPU vulnerabilities that affected speculative execution started appearing. According to reports, Intel has been pressing the researchers to delay their disclosure of the bugs, which is why we have yet to see all of them.

The disclosure of LazyFP, another speculative execution flaw, was also initially postponed till August. However, due to rumors of what the flaw may be, the researchers thought they needed to disclose it now, before malicious actors discover what the flaw is and start exploiting it in secret.

By disclosing it now, the researchers have put pressure on Intel to release a patch quickly to OEMs. (Users would likely still have to get firmware updates that include those patches from their motherboard or laptop manufacturers.)

Para resumir:

Se descubrió otra vulnerabilidad que parece afectar solo a intel en su sistema de Floating Point. basado en uno de los estados configurables "LazyFP"
intel recomienda a cualquier programador que deshabilite el LazyFP y use el estado "EagerFP".
Intel no ha dicho que tan grave es esta falla.
Intel ha pedido a los que han descubierto otras vulnerabilidades a que retrasen el anuncio publico de dichas fallas. Ya que no ha podido ni siquiera dar los parches de la ronda anterior de SPECTRE o MELTDOWN.
No hay información de si este bug afecta a AMD, lo mas probable sea que no.

Y todavia MAS broncas con intel!

Resulta que Hyperthreading puede ser afectado también por SPECTRE. Lo cual distros como OpenBSD deshabilitaron el HyperThreading en intel, y para estar mas seguros, deshabilitaron también el SMT en AMD.