Load value injection

<p>Load value injection (LVI) is an attack on <a href="/facts/Intel_microprocessors/gBqeUglP">Intel microprocessors</a> that can be used to attack <a href="/facts/Intel/SMF0gJJX">Intel</a>'s <a href="/facts/Software_Guard_Extensions/HcgbyB5P">Software Guard Extensions</a> (SGX) technology. It is a development of the previously known <a href="/facts/Meltdown_(security_vulnerability)/KVRY83cy">Meltdown</a> security vulnerability. Unlike Meltdown, which can only read hidden data, LVI can inject data values, and is resistant to the countermeasures so far used to mitigate the Meltdown vulnerability.
</p><p>In theory, any processor affected by Meltdown may be vulnerable to LVI, but as of March 2020<a href="https://en.wikipedia.org/w/index.php?title=Load_value_injection&action=edit">[update]</a>, LVI is only known to affect Intel microprocessors. Intel has published a guide to mitigating the vulnerability by using compiler technology, requiring existing software to be recompiled to add <a href="/facts/LFENCE/SSUt66mb">LFENCE</a> <a href="/facts/Memory_barrier/am65f6bs">memory barrier</a> <a href="/facts/Instruction_(computing)/8p8vwUeE">instructions</a> at every potentially vulnerable point in the code. However, this mitigation appears likely to result in substantial performance reductions in the recompiled code.
</p>

Load value injection open-in-new

Load value injection