How TIKTAG Attacks Slip Past ARM’s Memory Tagging Defenses

Researchers uncover two speculative execution gadgets, TIKTAG-v1 and v2, that leak ARM MTE tags and bypass memory safety defenses in real-world systems like Chrome and Linux.