New Spectre v2 attack variant leaks Linux root password hash in minutes
BleepingComputer published a report on a new Spectre v2 attack variant that, according to the headline, leaks the Linux root password hash in minutes. The story is dated September 29, 2026, and appears under the outlet's security coverage. The available source text consists of the headline and page metadata; it does not include the article body, so specifics such as the researchers involved, the affected kernel or CPU generations, the exact timing measurements, or any vendor response are not present in the material provided. What can be stated from the source is limited: a variant of the Spectre v2 speculative-execution attack class has been described, it targets Linux, and the reported outcome is exposure of the root password hash rather than the plaintext password. The headline frames the leak as occurring in minutes, indicating a short window rather than a long-running extraction. No CVE identifier, patch status, distribution list, or mitigation guidance appears in the source text, and none should be assumed. Because the excerpt is thin, this digest is restricted to the claim in the headline and the publication details; readers should consult the full BleepingComputer article for the technical mechanism and any response from affected parties.
The report claims a Spectre v2 variant can expose the Linux root password hash in minutes, a credential that grants privileged access if cracked.