Alte AMD-APUs geknackt: DRAM-Trick öffnet selbst geschützte CPU-Bereiche #AMD #SkitterCreekBathSalts
Alte AMD-APUs geknackt: DRAM-Trick öffnet selbst geschützte CPU-Bereiche
Ein einzelnes Bit im Speichercontroller genügt, um Sperren für PSP, SMM und Microcode-RAM alter AMD-APUs zu umgehen.
www.computerbase.de
August 14, 2026 at 8:00 AM
Alte AMD-APUs geknackt: DRAM-Trick öffnet selbst geschützte CPU-Bereiche #AMD #SkitterCreekBathSalts
On AMD platforms, the controller that maps physical addresses to DRAM chips is itself mapped in the memory space.
A system administrator with ring 0 kernel-level access could remap memory and obtain access "below-kernel", such as CPU firmware/fTPM.
github.com/xoreaxeaxeax...
#SkitterCreekBathSalts
A system administrator with ring 0 kernel-level access could remap memory and obtain access "below-kernel", such as CPU firmware/fTPM.
github.com/xoreaxeaxeax...
#SkitterCreekBathSalts
GitHub - xoreaxeaxeax/skitter-creek-bath-salts: Unlocking _everything_ on the CPU with DRAM scrambling
Unlocking _everything_ on the CPU with DRAM scrambling - xoreaxeaxeax/skitter-creek-bath-salts
github.com
August 13, 2026 at 10:08 PM
On AMD platforms, the controller that maps physical addresses to DRAM chips is itself mapped in the memory space.
A system administrator with ring 0 kernel-level access could remap memory and obtain access "below-kernel", such as CPU firmware/fTPM.
github.com/xoreaxeaxeax...
#SkitterCreekBathSalts
A system administrator with ring 0 kernel-level access could remap memory and obtain access "below-kernel", such as CPU firmware/fTPM.
github.com/xoreaxeaxeax...
#SkitterCreekBathSalts
This could all be made up for all I know, but it seems whacky.
"[...] When the address translations break, so do the security primitives built on them, and we unlock everything."
github.com/xoreaxeaxeax... #SkitterCreekBathSalts
"[...] When the address translations break, so do the security primitives built on them, and we unlock everything."
github.com/xoreaxeaxeax... #SkitterCreekBathSalts
GitHub - xoreaxeaxeax/skitter-creek-bath-salts: Unlocking _everything_ on the CPU with DRAM scrambling
Unlocking _everything_ on the CPU with DRAM scrambling - xoreaxeaxeax/skitter-creek-bath-salts
github.com
August 13, 2026 at 7:24 PM
This could all be made up for all I know, but it seems whacky.
"[...] When the address translations break, so do the security primitives built on them, and we unlock everything."
github.com/xoreaxeaxeax... #SkitterCreekBathSalts
"[...] When the address translations break, so do the security primitives built on them, and we unlock everything."
github.com/xoreaxeaxeax... #SkitterCreekBathSalts