Arm security defense shattered by speculative execution 95% of the time

Researchers disclosed "TikTag", a speculative-execution side-channel technique that can leak Arm Memory Tagging Extension (MTE) tags quickly and reliably (claimed >95% success in under four seconds), demonstrating that MTE can be bypassed on multiple Cortex cores and Pixel 8 devices; proof-of-concept code recovered tags from Chrome on Android and the Linux kernel, Arm acknowledged the issue and recommended mitigations such as speculation barriers while Google accepted but did not fully remediate in some components.