An Incomplete Reading List about Spectre and their Friends

Speculative Execution Attacks

2018

Reading privileged memory with a side-channel

Spectre-SSB: Speculative Store Bypass

Speculative Buffer Overflows: Attacks and Defenses

Spectre Returns! Speculation Attacks using the Return Stack Buffer

2019

A Systematic Evaluation of Transient Execution Attacks and Defenses

2020

Speculative Probing: Hacking Blind in the Spectre Era

Bypassing memory safety mechanisms through speculative control flow hijacks

2021

2022

KASPER: Scanning for Generalized Transient Execution Gadgets in the Linux Kernel

RETBLEED: Arbitrary Speculative Code Execution with Return Instructions

PHANTOM JMPS

Branch History Injection: On the Effectiveness of Hardware Mitigations Against Cross-Privilege Spectre-v2 Attacks

Relevant Exploit Techniques

RAMBleed: Reading Bits in Memory Without Accessing Them

Rage Against the Machine Clear: A Systematic Analysis of Machine Clears and Their Implications for Transient Execution Attacks

NetCAT: Practical Cache Attacks from the Network

LVI: Hijacking Transient Execution through Microarchitectural Load Value Injection

Documentation

Agner Fog's Instruction Tables

WikiChip