Kana dzikashandiswa, zvikanganiso izvi zvinogona kubvumira vanorwisa kuti vawane mukana usina mvumo kune ruzivo rwakadzama kana kuti kazhinji kukonzera matambudziko.
Munguva pfupi yapfuura, Trail yeBits vaongorori (femu yekuchengetedza) kuziviswa kuburikidza ne blog post Vakaona dambudziko mu AMD, Apple, Qualcomm uye Imagination GPUs, izvo zvinoita kuti zvikwanisike kuti mumwe munhu awane data kubva mundangariro yekadhi yemifananidzo, kunyange kana yakagadzirwa neimwe chirongwa.
Inonzi LeftoverLocals, Kusagadzikana uku kunokanganisa kune graphics processing units uye iyo anorwisa anogona kuba yakawanda yakawanda yedata.
About LeftoverLocals
Yakatonyorwa pasi pe "CVE-2023-4969" uye ine mamakisi e "8", ivo vanogadzira. LeftoverLocals, injodzi ine njodzi zvakanyanya, kubvira inobvumira kudzoreredza data kubva kundangariro yenzvimbo yeGPU, inoenderera mberi mushure mekunge imwe nzira yaitwa uye inogona kunge iine ruzivo rwakadzama.
Chii chinoita kuti LeftoverLocals ive nenjodzi yekusagadzikana ndeyekuti inokanganisa zvakasiyana-siyana zvinoshandiswa zvakanyanya, mazhinji acho akasara asina zvikwambo uye izvo zvinogona kushandiswa munzvimbo dzakawanda dzevashandisi, uko vatyairi vevashandisi vakasiyana vanomhanya paGPU imwechete, uye inogona kushandiswa nemalware kutarisa chiitiko chemaitiro ari kushanda paGPU, ichizivisa data rakagadziriswa neGPU kernel.
LeftoverLocals inomuka nekuda kwekusakwana kuparadzaniswa kweGPU yemuno ndangariro and the kusakwanisa kubvisa ndangariro yakati mushure mekuita kwemaitiro paGPU. Izvi zvinobvumira maitiro akashata ekuona yakasara dhata mundangariro yemunharaunda mushure mekunge imwe nzira yamhanya kana kuverenga data kubva kune iri kuita maitiro.
Zvinonzi, Iwo musimboti weLeftoverLocals uri mundangariro yenzvimbo paGPU inoita senge cache yekuchengetedza maverengero epakati. uye inogona kusiyanisa muhukuru kubva pamakumi e kilobytes kusvika kune akati wandei megabytes kune yega yega computing unit. Kurwiswa uku kunosanganisira kumhanya mutyairi (kernel) paGPU iyo nguva nenguva inokopa zviri mukati mendangariro yemunharaunda kundangariro yepasirese (VRAM). Sezvo ndangariro yenzvimbo isina kucheneswa kana ichichinja pakati pema processor paGPU uye yakagovaniswa pakati pemaitiro akasiyana mukati meiyo yakafanana GPU computing unit, inogona kunge iine yakasara data kubva kune mamwe maitiro.
Kuti uedze kusazvibata, Trail yeBits vaongorori vakagadzira mamwe ekushandisa prototypes yemaGPU akasiyana, uchishandisa OpenCL, Vulkan uye Metal APIs kuwana iyo GPU. Kunyangwe kuita kurwisa kubva kubrowser kuburikidza neWebGPU kwakaoma nekuda kweiyo dynamic array boundary cheki yakawedzerwa neWebGPU, vaongorori vakaratidza kuti kusazvibata kungashandiswa sei kuona inobuda data kubva kune vamwe vashandisi uye kugadzira nzira dzekutaurirana. yakavanzika pakati pemaitiro akasiyana.
Pamusoro pezvo, zvinotaurwa kuti huwandu hwe data yakasefa hunoenderana neiyo chaiyo furemu yeGPU uye saizi yendangariro yenzvimbo. Semuenzaniso, iyo yakakura AMD Radeon RX 7900 XT inorasikirwa ne5.5 MB kana anenge 181 MB pamubvunzo weLLM, sekureva kwevaongorori.
Sezvo maGPU ari kuwedzera kushandiswa kumhanyisa AI uye mashandisirwo ekudzidza muchina, vaongorori vakayambira kuti zvikanganiso zvakaita seLeftoverLocals zvinogona kuve chinangwa chikuru.
"Pakazere, kuunzwa kwemichina yekudzidza kunosimudza nzvimbo nyowani dzekurwiswa dzisingatarisirwe nemhando dzekutyisidzira dzechinyakare uye izvo zvinogona kutungamira kune kwakajeka uye kwakajeka kuwana data, modhi paramita kana zvinoguma zvaitika, zvichiwedzera kurwisa kwese kwehurongwa," the report inoti. vatsvakurudzi vakanyora.
Trail of Bits akacherechedza izvozvo zvigadziriso zvakaitwa nekuda kwekusagadzikana uku pane zvimwe zvigadzirwa zveApple, uye mutyairi wekuvandudza kubva ku AMD anotarisirwa muna Kurume, kune chikamu chayo Qualcomm yataura kuti yakagadzirisa nyaya yeAdreno a630 GPU mu firmware update 2.07, nepo Imagination yakapa gadziriso muDDK 23.3 itsva yakaburitswa. muna December.
Kune rimwe divi, zvinonzi NVIDIA, Intel uye ARM GPUs hazvina kukanganiswa. Mune Mesa yakavhurika sosi OpenCL madhiraivha e AMD GPUs, ndangariro inocheneswa mushure mega yega kernel boot, asi iyi nzira inoonekwa seisina basa mune dzimwe nguva.
Pakupedzisira hongu iwe unofarira kukwanisa kuziva zvakawanda nezvazvo, unogona kutarisa ruzivo mu inotevera chinongedzo.