<![CDATA[New Spectre v2 attack variant leaks Linux root password hash in minutes]]>Researchers have devised a new Branch Target Reuse (BTR) attack that can recover root password hashes from Intel machines running Linux in roughly 3-5 minutes on average. The technique builds on Spectre v2 and abuses branch target prediction behavior to leak sensitive data from kernel memory.

Key points:

  • Targets Intel hardware running Linux
  • Recovers root password hashes in about 3-5 minutes on average
  • Based on a Spectre v2-style speculative execution flaw
  • Classified as a Branch Target Reuse (BTR) attack

The article does not list specific affected versions, indicators of compromise, or mitigation steps, so apply your usual Spectre/Meltdown hardening guidance and watch for vendor updates. As always, keep microcode and kernel packages current and review your exposure to local attackers.

Source: BleepingComputer

Does your organization run Intel-based Linux systems, and are you planning any additional mitigations in response to this research?

]]>https://xploitlk.com/topic/511/new-spectre-v2-attack-variant-leaks-linux-root-password-hash-in-minutesRSS for NodeTue, 27 Oct 2026 08:20:22 GMTWed, 30 Sep 2026 00:30:18 GMT60