DDRop Attack Exposes Critical Flaws in Intel and AMD Confidential Computing
A new hardware attack called DDRop undermines memory protections in Intel TDX and AMD SEV-SNP. It allows attackers to manipulate encrypted data by dropping memory writes.
TL;DR
- Researchers revealed DDRop, a hardware attack targeting Intel TDX and AMD SEV-SNP.
- It exploits memory protection by silently dropping writes, tricking processors into using stale data.
- Attackers need brief physical access and control over server software to deploy the payload.
- This highlights risks in confidential computing environments used by cloud providers.
- Organizations should assess their reliance on hardware-level security assurances.
Confidential computing technologies from Intel and AMD have been undermined by a newly disclosed hardware attack known as DDRop. This vulnerability targets core memory protection mechanisms, allowing attackers to interfere with how encrypted data is processed within secure enclaves.
The implications are significant for enterprises relying on these platforms for secure cloud workloads. By exploiting subtle flaws in memory handling, DDRop enables malicious actors to maintain outdated data states without detection, potentially compromising sensitive operations.
How DDRop Works
- DDRop manipulates memory by silently dropping write requests to DRAM.
- This causes the processor to continue using previously stored (and possibly outdated) encrypted values.
- The technique bypasses integrity checks designed to protect confidential computing environments.
- It specifically affects Intel TDX and AMD SEV-SNP, both widely adopted in enterprise cloud infrastructures.
Impact and Mitigation Considerations
- Successful exploitation requires temporary physical access and existing software control.
- Cloud service providers leveraging these technologies may face exposure if physical security is breached.
- No immediate patches are available; mitigations will likely require firmware or microcode updates.
- Enterprises should evaluate their use of confidential computing and review physical access policies.
- Long-term solutions may involve redesigning memory subsystem interactions to prevent such silent failures.
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.