ChipsLobsters1 day ago
Unlocking _everything_ on the CPU with DRAM scrambling
1 min read
skitter-creek-bath-salts rewires AMD Family 16h DRAM controller translations to expose protected memory regions, including PSP, SMM, C6, and microcode. A single bit-flip in the DCT scrambles physical addresses, bypassing security fences built above the memory controller. The exploit works from C without touching DRAM.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
