Stories
Slash Boxes
Comments

SoylentNews is people

Submission Preview

Link to Story

DRAM leakage side effect exploited for privilege escalation on both DD3 & DDR4

Accepted submission by bitstream at 2016-03-20 06:22:12
Security

The high density of dynamic RAM like DDR3 and the tendency for bit cells to leak their charge has enabled a physical weakness named "Row Hammer [wikipedia.org]" that can be used for privilege escalation. Tests now show that also DDR4 memory is also susceptible to this [arstechnica.com]. The article How Rowhammer Could Be Used to Exploit Weaknesses in Computer Hardware [thirdio.com] (PDF), came to this conclusion by testing the integrity of dual in-line memory modules (DIMM) using new diagnostic techniques that showed that the memory type is vulnerable to "bitflipping," where bits change their value.

Mitigation can perhaps be accomplished by check sum with secret salts and physically moving around the pages responsible for privileges and memory setup?


Original Submission