DRAM Scrambling Exposes CPU Secrets on AMD Family 16h Chips
TL;DR. Researchers demonstrated a DRAM scrambling technique to expose highly protected areas of AMD Family 16h CPUs, including the Platform Security Processor and System Management Mode. - The method, named skitter-creek-bath-salts, manipulates DRAM address translations to access normally invisible memory carveouts. - This vulnerability targets the deepest memory hierarchy, bypassing security mechanisms on specific AMD processor generations. - The technique highlights fundamental security challenges in CPU architecture and memory management, extending to other architectures like ARM and RISC-V.
- A new technique, skitter-creek-bath-salts, allows physical DRAM address translation manipulation.
- This method grants access to secure CPU components like the Platform Security Processor and System Management Mode.
- The demonstration specifically targets AMD Family 16h CPUs, where DRAM controller registers are documented and unlocked.
- The underlying principles of memory manipulation are broadly applicable across various CPU architectures.
Sources
- Spaghettifying DRAM — github.com