Compromising Spectre v2 HW Mitigations By Exploiting BPRC (ETH Zurich)


A new technical paper titled "Branch Privilege Injection: Compromising Spectre v2 Hardware Mitigations by Exploiting Branch Predictor Race Conditions" was published by researchers at ETH Zurich. Presented at USENIX Security Symposium in August 2025. Abstract "Modern branch predictors prevent Spectre v2 attacks by associating predictions with the privilege domain they should be restricted to... » read more