New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes

Researchers have discovered a new CPU vulnerability called TONTOU that circumvents existing Spectre v2 protections and can be exploited to steal sensitive data like Linux password hashes from vulnerable systems. You should monitor your systems for patches