Researchers Uncover First Native Spectre v2 Exploit Against Linux Kernel

Researchers disclosed Native Branch History Injection (CVE-2024-2201), described as the first native Spectre v2 exploit against Linux on Intel that can bypass existing mitigations (including unprivileged eBPF and FineIBT) using an "InSpectre Gadget" to find speculative gadgets and leak privileged kernel memory; multiple vendors and hypervisors are impacted, though exploitation requires local CPU resource access.