Summary
Security researcher Christopher Domas revealed a critical hardware vulnerability in AMD Family 16h processors that allows attackers to bypass all platform security boundaries by manipulating DRAM controller address translations.
Take Action:
If you run AMD Family 16h processors, be aware of this hardware architectural flaw. There is no patch for this flaw and no way to lock the affected registers, so your only real defence is stopping untrusted code and people from reaching the machine: enforce physical security, restrict local and administrator access to a small trusted group, and use strict application whitelisting. For systems holding sensitive secrets (fTPM keys, security-critical workloads), plan to migrate them onto newer hardware.
Read the full article on BeyondMachines
This article was originally published on BeyondMachines
