first release
Pre-release
Pre-release
InSpectre Gadget Results
date: 12-12-2023
target: Linux Kernel 6.6-rc4
To inspect the results, download the tarball and execute run-queries.sh (requires sqlite3). This will create gadgets.db and print
some stats of the gadgets found.
Exploitable Gadgets
+------------------------+-----------------------+-------+---------------+--------------------------+-----------------------------------+------------------------+------------------------+------------------------------------------+-----------------------------------+-----------------------------+------------+--------------------+---------------------------+--------------------------+-------------------+-----------------------+
| type | transmitter | total | no_techniques | requires_prime_and_probe | is_secret_below_cache_granularity | is_secret_entropy_high | is_max_secret_too_high | is_max_secret_too_high_incl_high_entropy | base_has_direct_secret_dependency | leak_secret_near_valid_base | non_linear | sliding_and_prefix | sliding_and_base_overflow | prefix_and_base_overflow | in_place_training | out_of_place_training |
+------------------------+-----------------------+-------+---------------+--------------------------+-----------------------------------+------------------------+------------------------+------------------------------------------+-----------------------------------+-----------------------------+------------+--------------------+---------------------------+--------------------------+-------------------+-----------------------+
| call targets | TransmitterType.LOAD | 771 | 14 | 191 | 71 | 446 | 7 | 131 | 63 | 0 | 626 | 0 | 0 | 134 | 510 | 38 |
| call targets | TransmitterType.STORE | 267 | 4 | 98 | 31 | 126 | 0 | 32 | 62 | 0 | 228 | 0 | 1 | 47 | 193 | 6 |
| reachable call targets | TransmitterType.LOAD | 239 | 1 | 58 | 25 | 133 | 3 | 42 | 22 | 0 | 226 | 0 | 1 | 43 | 190 | 15 |
| reachable call targets | TransmitterType.STORE | 80 | 3 | 51 | 5 | 21 | 0 | 8 | 45 | 0 | 75 | 0 | 2 | 23 | 65 | 3 |
| jump targets | TransmitterType.LOAD | 432 | 0 | 46 | 222 | 161 | 0 | 92 | 21 | 0 | 285 | 0 | 0 | 92 | 162 | 120 |
| jump targets | TransmitterType.STORE | 207 | 0 | 15 | 55 | 134 | 0 | 58 | 1 | 0 | 184 | 0 | 0 | 58 | 78 | 78 |
+------------------------+-----------------------+-------+---------------+--------------------------+-----------------------------------+------------------------+------------------------+------------------------------------------+-----------------------------------+-----------------------------+------------+--------------------+---------------------------+--------------------------+-------------------+-----------------------+
Non-Exploitable Gadgets
+-----------------------+---------------------------+--------------------+
| transmitter | problem | COUNT(DISTINCT pc) |
+-----------------------+---------------------------+--------------------+
| TransmitterType.LOAD | indirect base alias | 1228 |
| TransmitterType.STORE | indirect base alias | 450 |
| TransmitterType.LOAD | invalid base | 29762 |
| TransmitterType.STORE | invalid base | 4628 |
| TransmitterType.LOAD | invalid secret address | 1092 |
| TransmitterType.STORE | invalid secret address | 184 |
| TransmitterType.LOAD | secret not inferable | 96 |
| TransmitterType.STORE | secret not inferable | 6 |
| TransmitterType.LOAD | secret entropy too high | 944 |
| TransmitterType.STORE | secret entropy too high | 154 |
| TransmitterType.LOAD | secret too big | 1901 |
| TransmitterType.STORE | secret too big | 396 |
| TransmitterType.LOAD | secret too small | 460 |
| TransmitterType.STORE | secret too small | 63 |
| TransmitterType.LOAD | contains speculation stop | 25 |
| TransmitterType.STORE | contains speculation stop | 8 |
| TransmitterType.LOAD | TOTAL | 31690 |
| TransmitterType.STORE | TOTAL | 5019 |
+-----------------------+---------------------------+--------------------+