LoongLeak: Loongson caches leak disk keys and kernel data to any process
CISPA researchers found LoongLeak, a hardware flaw in Loongson 3A5000/3A6000 CPUs where the FLD.S instruction leaves 28 bytes of "uncertain" register data that is actually drawn from the shared L1 cache. Unprivileged attackers, even inside guest VMs, can extract AES keys, password hashes, and kernel data. The 3A6000 got a partial fix; the 3A5000 needs hardware replacement.