New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
New Spectre-v2 BTR attack leaks Linux memory via JIT engines despite existing defenses.
Academics have disclosed a new Spectre-v2 variant, dubbed Branch Target Reuse (BTR), which exploits Just-In-Time (JIT) engines in browsers, runtimes, and kernels. This vulnerability allows attackers to hijack control flow and leak sensitive data, including root password hashes on patched Linux systems, by reusing stale indirect branch prediction entries.
AI summary of the linked source. Not reviewed by an editor. How this works
Run SpiderMonkey?
Get an email when a new story names SpiderMonkey, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe Branch Target Reuse (BTR) attack exploits a fundamental weakness in speculative execution by reusing stale indirect branch prediction entries, allowing attackers to redirect control flow and exfiltrate sensitive data — including root password hashes — even on fully patched Linux systems. This highlights a recurring challenge with microarchitectural vulnerabilities: mitigations are often incomplete or narrowly scoped, leaving systems exposed to novel variants. The involvement of JIT engines (browsers, runtimes, kernels) dramatically widens the attack surface, making this relevant beyond just OS-level hardening. Organizations that assume patching alone provides sufficient protection are left in a dangerous false sense of security.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Automated patch management
Known holes get closed in days, not months.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Spectre-v2 BTR