COMMON WEAKNESS ENUMERATIONIncomplete

CWE-1281

Sequence of Processor Instructions Leads to Unexpected Behavior

Specific combinations of processor instructions lead to undesirable behavior such as locking the processor until a hard reset performed.

Soyutlama

Base

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

Specific combinations of processor instructions lead to undesirable behavior such as locking the processor until a hard reset performed.

Genişletilmiş açıklama

If the instruction set architecture (ISA) and processor logic are not designed carefully and tested thoroughly, certain combinations of instructions may lead to locking the processor or other unexpected and undesirable behavior. Upon encountering unimplemented instruction opcodes or illegal instruction operands, the processor should throw an exception and carry on without negatively impacting security. However, specific combinations of legal and illegal instructions may cause unexpected behavior with security implications such as allowing unprivileged programs to completely lock the CPU.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Architecture and Design

Unexpected behavior from certain instruction combinations can arise from bugs in the ISA

Yaşam döngüsü evresi

Implementation

Unexpected behavior from certain instruction combinations can arise because of implementation details such as speculative execution, caching etc.

Risk

Başarılı sömürü neye yol açar?

Varies by Context

Etkilenen güvenlik alanları: Integrity, Availability

Savunma

Nasıl önlenir ve çözülür?

Testing

Test ve doğrulama yaklaşımı

Detay
Implement a rigorous testing strategy that incorporates randomization to explore instruction sequences that are unlikely to appear in normal workloads in order to identify halt and catch fire instruction sequences.

Patching and Maintenance

Patching and Maintenance aşaması savunması

Detay
Patch operating system to avoid running Halt and Catch Fire type sequences or to mitigate the damage caused by unexpected behavior. See [REF-1108].