{"id":182995,"date":"2026-08-14T10:53:40","date_gmt":"2026-08-14T08:53:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/obhod-izolyaczii-pamyati-na-sistemah-s-cpu-amd-cherez-manipulyaczii-s-kontrollerom-pamyati"},"modified":"2026-08-14T10:53:42","modified_gmt":"2026-08-14T08:53:42","slug":"bypassing-memory-isolation-on-amd-cpu-systems-via-memory-controller-manipulation","status":"publish","type":"post","link":"https:\/\/prohoster.info\/nl\/blog\/news\/bypassing-memory-isolation-on-amd-cpu-systems-via-memory-controller-manipulation","title":{"rendered":"Omzeiling van geheugenisolatie op systemen met AMD CPU door manipulaties met de geheugencontroller","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tijdens de Black Hat 2026-conferentie werd een aanvalsmethode gedemonstreerd die de swizzle-modus van AMD-geheugencontroller gebruikt om geheugenisolatie te omzeilen en willekeurige gegevens uit het geheugen te lezen of te schrijven, inclusief gebieden met CPU-microcode en geheugen dat is toegewezen aan de PSP-processor (Platform Security Processor). Deze methode maakt het mogelijk om ingebouwde encryptiemechanismen voor geheugen (AMD SME\/SEV) te omzeilen, de isolatie van virtuele machines te doorbreken en de microcode van de processor te herschrijven. Voor manipulatie van de geheugencontroller is het nodig om code op kernniveau uit te voeren, wat de gevaren van deze aanvalstechniek vermindert. <\/p>\n

De \"swizzle\" modus verandert de logica van het adresseren van het geheugen om conflicten te voorkomen die ontstaan bij sequenti\u00eble toegang tijdens het lezen uit verschillende rijen binnen hetzelfde geheugenbank. Om dergelijke conflicten te vermijden, past de controller in de \"swizzle\" modus een XOR-bewerking toe op een deel van de adresbits om aaneengeschakelde datablokken over verschillende geheugenbanken te verdelen. De aanval houdt in dat er manipulaties worden uitgevoerd met de \"swizzle\" modus op een draaiend systeem om fysieke adressen on-the-fly te herschikken. <\/p>\n

Een prototype van de aanval werd gedemonstreerd op AMD-processoren van de 16h-serie, gebruikt in de consoles PS4 en Xbox One, waarin de configuratieregisters van de geheugencontroller gedocumenteerd waren en er geen mecanismo was om de toegang na het opstarten van het systeem te blokkeren. In AMD-processoren van de 17h-serie en nieuwer (begonnen met Zen) heeft AMD een mechanisme voor toegangsbewerking tot de configuratieregisters van de geheugencontroller ge\u00efmplementeerd, evenals bescherming tegen vervalsing van de microcodekopie die in het RAM wordt gereset tijdens de overgang van de processor naar de slaapstand (C6).
\n
Bron: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat 2026 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 swizzle-\u0440\u0435\u0436\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 AMD \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0447\u0442\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0441 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u043e\u043c CPU \u0438 \u043f\u0430\u043c\u044f\u0442\u044c, \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u0443\u044e PSP-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0443 (Platform Security Processor). \u041c\u0435\u0442\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 (AMD SME\/SEV), \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430. \u0414\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182995","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Omzeilen van geheugenisolatie op systemen met AMD CPU's via manipulaties met de geheugencontroller | ProHoster","description":"Tijdens de Black Hat 2026-conferentie werd een aanvalsmethode gedemonstreerd die de swizzle-modus van AMD-geheugencontroller gebruikt om geheugenisolatie te omzeilen en willekeurige gegevens uit het geheugen te lezen of te schrijven, inclusief gebieden met.","canonical_url":"https:\/\/prohoster.info\/nl\/blog\/news\/bypassing-memory-isolation-on-amd-cpu-systems-via-memory-controller-manipulation","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nl_NL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u0445\u043e\u0434 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 CPU AMD \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u043c \u043f\u0430\u043c\u044f\u0442\u0438 | ProHoster","og:description":"\u041d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat 2026 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 swizzle-\u0440\u0435\u0436\u0438\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 AMD \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0447\u0442\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0441.","og:url":"https:\/\/prohoster.info\/nl\/blog\/news\/bypassing-memory-isolation-on-amd-cpu-systems-via-memory-controller-manipulation","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-08-14T08:53:40+00:00","article:modified_time":"2026-08-14T08:53:42+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182995","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-20 16:26:29","updated":"2026-08-20 16:26:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/182995","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/comments?post=182995"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/182995\/revisions"}],"predecessor-version":[{"id":182996,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/182995\/revisions\/182996"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media?parent=182995"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/categories?post=182995"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/tags?post=182995"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}