Mitigate Thunderspy

[bitnom]

Thunderspy:

We have found 7 vulnerabilities in Intel’s design and developed 9 realistic scenarios how these could be exploited by a malicious entity to get access to your system, past the defenses that Intel had set up for your protection.

Proof of concept vulnerability checker: spycheck-linux

Possible mitigation code: spiblock

This is a request for comment on rolling mitigation code into usbguard, if possible and not redundant.

[muelli]

how does this affect USB and USBGuard?

[bitnom]

how does this affect USB and USBGuard?

The vulnerability is affecting usb-c/thunderbolt. It's exploited by maliciously interfacing with the usb-c port by various means.