{"id":182995,"date":"2026-08-14T10:53:40","date_gmt":"2026-08-14T08:53:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/obhod-izolyaczii-pamyati-na-sistemah-s-cpu-amd-cherez-manipulyaczii-s-kontrollerom-pamyati"},"modified":"2026-08-14T10:53:42","modified_gmt":"2026-08-14T08:53:42","slug":"bypassing-memory-isolation-on-amd-cpu-systems-via-memory-controller-manipulation","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/bypassing-memory-isolation-on-amd-cpu-systems-via-memory-controller-manipulation","title":{"rendered":"AMD CPU-del m\u00e4lukaitse \u00fcmberminek l\u00e4bi m\u00e4lu kontrollimise manipuleerimise","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Black Hat 2026 konverentsil demonstreeriti r\u00fcnnakumeetodit, mis kasutab AMD m\u00e4lujuhtimisseadmete swizzle-re\u017eiimi, et \u00fcletada m\u00e4lu isoleerimist ja lugeda v\u00f5i kirjutada juhuslikke andmeid m\u00e4lust, sealhulgas CPU mikrokoodi ja PSP-protsessori (Platform Security Processor) eraldatud m\u00e4lu. Meetod v\u00f5imaldab \u00fcletada sisseehitatud m\u00e4lu kr\u00fcpteerimise mehhanisme (AMD SME\/SEV), rikkuda virtuaalmasinate isoleeritust ja \u00fcle kirjutada protsessori mikrokoodi. M\u00e4lujuhtimisseadmest manipuleerimiseks on vajalik tuumakoodi t\u00e4itmine, mis v\u00e4hendab esitatud r\u00fcnnaku tehnika ohtlikkust. <\/p>\n

Re\u017eiim «swizzle» muudab operatiivm\u00e4lu adresseerimise loogikat, et v\u00e4ltida konflikte, mis tekivad j\u00e4rjestikuse juurdep\u00e4\u00e4su korral, kui loetakse erinevatelt ridadelt \u00fches m\u00e4epankas. Selliste konfliktide v\u00e4ltimiseks rakendab «swizzle» re\u017eiimis kontroller XOR operatsiooni osa aadressibitidest j\u00e4rjestikuste andmeplokkide jagamiseks erinevatesse m\u00e4epankadesse. R\u00fcnnak seisneb «swizzle» re\u017eiimi manipulatsioonides t\u00f6\u00f6tavas s\u00fcsteemis f\u00fc\u00fcsiliste aadresside hetkelise \u00fcmberjaotamise jaoks. <\/p>\n

R\u00fcnnakuproov demonstreeriti AMD 16h seeria protsessoritel, mida kasutati PS4 ja Xbox One konsoolides, kus m\u00e4lujuhtimisseadme adresseerimise konfigureerimise register oli dokumenteeritud ja s\u00fcsteemi k\u00e4ivitamisel ei tulnud selle blokeerimiseks mehhanisme. AMD 17h seeria ja uuemates (alates Zenist) on ettev\u00f5te AMD rakendanud mehhanismi, mis blokeerib juurdep\u00e4\u00e4su m\u00e4lujuhtimisseadme konfigureerimise registritele ning lisanud kaitse mikrokoodi otsimise vastu, mis kirjutatakse operatiivm\u00e4lu ajal, kui protsessor l\u00e4heb unere\u017eiimi (C6).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat 2026 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 swizzle-\u0440\u0435\u0436\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 AMD \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0447\u0442\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0441 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u043e\u043c CPU \u0438 \u043f\u0430\u043c\u044f\u0442\u044c, \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u0443\u044e PSP-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0443 (Platform Security Processor). \u041c\u0435\u0442\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 (AMD SME\/SEV), \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430. \u0414\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182995","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47M\u00e4lu isoleerituse \u00fcletamine AMD CPU s\u00fcsteemides m\u00e4lujuhtimisseadmest manipuleerimise kaudu | ProHoster","description":"Black Hat 2026 konverentsil demonstreeriti r\u00fcnnakumeetodit, mis kasutab AMD m\u00e4lujuhtimisseadmete swizzle-re\u017eiimi, et \u00fcletada m\u00e4lu isoleerimist ja lugeda v\u00f5i kirjutada juhuslikke andmeid m\u00e4lust, sealhulgas valdkondi.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/bypassing-memory-isolation-on-amd-cpu-systems-via-memory-controller-manipulation","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u0445\u043e\u0434 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 CPU AMD \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u043c \u043f\u0430\u043c\u044f\u0442\u0438 | ProHoster","og:description":"\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat 2026 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 swizzle-\u0440\u0435\u0436\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 AMD \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0447\u0442\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0441.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/bypassing-memory-isolation-on-amd-cpu-systems-via-memory-controller-manipulation","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-14T08:53:40+00:00","article:modified_time":"2026-08-14T08:53:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182995","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-20 16:26:29","updated":"2026-08-20 16:26:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182995","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=182995"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182995\/revisions"}],"predecessor-version":[{"id":182996,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/182995\/revisions\/182996"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=182995"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=182995"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=182995"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}