🟠 High | Source: The Register — Security
Researchers have discovered cache side-channel vulnerabilities in Chinese-made Loongson processors that allow attackers to extract sensitive data from memory. Critically, the attack can be executed from within a guest virtual machine, meaning cloud or virtualised environments running on Loongson hardware could be at risk. This class of vulnerability is particularly serious as it bypasses traditional isolation boundaries between workloads.
Security Architect’s Take: If your organisation operates or procures infrastructure — particularly in Asia-Pacific supply chains or sovereign cloud environments — that may include Loongson-based hardware, audit your vendor hardware inventory immediately and assess whether workload isolation controls are sufficient pending a microcode or firmware patch from the vendor.
Original advisory: Chinese Loongson processors have leaky caches, researchers find