AMD底层内存攻击解锁CPU全部保护域
推荐指数 61.0 NO. 013 · 2026.08.14
发布2026/08/13Score321Comments98
为什么值得看
通过篡改AMD DRAM控制器的物理地址映射，绕过所有基于地址的安全隔离机制，可访问PSP、SMM、微代码等原本对内核不可见的保护区。这是近年来最底层的x86硬件攻击之一，对可信执行环境和云安全基础设施有根本性威胁。
编辑判断
这个攻击的狠毒之处在于它不打软件补丁能修的东西——它直接废掉了整个地址空间的安全根基。AMD从17h开始不再公开DRAM控制器文档，但硬件设计思路没变，后续型号很可能同样脆弱。
做云安全或TEE相关产品的团队需要重新评估"硬件隔离不可绕过"这个假设。如果你依赖AMD PSP做远程证明、机密计算，现在就该开始准备基于软件冗余的降级方案，而不是等补丁。
社区反馈
意见分歧 77 条评论
核心争论：技术本身令人震撼，但研究者用AI写报告引发写作质量争议
Holy crap. This is like a software-reachable version of the dynamic memory aliasing hardware attack demonstrated by https://batteringram.eu/
Oh that's a clever attack. The RAM bus was often thought of as off-limits because of the speed and signal integrity requirements. They bypassed those.
The researcher behind this is obviously highly knowledgeable in reverse engineering CPUs to the tune it reminds me of the dwarves digging in Moria... But why on earth do they have to use AI to write their writeups?!