Meltdown

lore

securityprogramming

A 2018 attack letting user programs read protected kernel memory via speculative execution.

Meltdown broke the isolation between user space and the kernel on affected CPUs, allowing arbitrary kernel memory to be read. The main mitigation, kernel page-table isolation, carried a measurable performance cost.

Also known as: Meltdown, CVE-2017-5754

Sources

  • CVE-2017-5754 (2018)

All glossary entries