The TONTOU attack is a newly identified speculative execution side-channel vulnerability that circumvents recent mitigations implemented for Spectre v2. By exploiting this bypass, attackers can leak sensitive data such as Linux password hashes from vulnerable systems. The attack specifically targets Linux environments and demonstrates that current Spectre v2 defenses are insufficient against this novel technique. Details about affected CPU models or Linux distributions have not been provided, nor are there known exploits currently active in the wild.

The impact of the TONTOU attack is the unauthorized disclosure of sensitive information, namely Linux password hashes, which could potentially be used to escalate privileges or compromise user accounts. This undermines the effectiveness of existing Spectre v2 mitigations and poses a risk to the confidentiality of data on affected Linux systems. There is no evidence of active exploitation in the wild, but the vulnerability represents a significant theoretical risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this attack bypasses existing Spectre v2 mitigations, affected organizations should monitor vendor communications for updates or patches addressing this new technique. Until official fixes are available, consider applying any recommended microcode or kernel updates and follow best practices for limiting speculative execution side-channel risks as advised by CPU and OS vendors.