DDR4 inoramba iri panjodzi yekurwiswa neRowHammer kunyangwe paine imwe dziviriro

Chikwata chevaongorori kubva kuYunivhesiti Yemahara yeAmsterdam, iyo Swiss Yakakwira technical Chikoro cheZurich neQualcomm vakaita chidzidzo nezve kugona kwekudzivirira kubva Kurwiswa uku RowHammer inoshandiswa muDDR4 ndangariro machipisi, iyo inobvumidza izvo zvemukati mezvimedu zveesimba zvisina kujairika kuwana memory (DRAM) kuchinjwa.

Mhedzisiro yacho yaishungurudza sezvo DDR4 ichiramba iri panjodzi (CVE-2020-10.255) kune RowHammer, se kukanganisa uku kunotendera kukanganisa izvo zvirimo ndangariro yega kuverenga zvakapetwa data kubva kune dzakavakidzana ndangariro maseru.

Sezvo DRAM iri maviri-maviri mativi maseru, rimwe nerimwe riine capacitor uye transistor, kuenderera kuverengwa kwenzvimbo imwechete yekurangarira kunotungamira mukuchinja kwemagetsi uye anomalies, zvichikonzera kurasikirwa kudiki kwemutero kubva kumasero akavakidzana.

Kana iko kuverenga kwakakura zvakakwana, saka sero rinogona kurasikirwa nemutengo wakakura zvakakwana uye rinotevera rekumutsiridzwa harizowana nguva yekudzoreredza mamiriro aro ekutanga, izvo zvinozotungamira mukuchinja mukukosha kwedata rakachengetwa muchitokisi. .

Kuvhara izvi, machipisi eazvino eDDR4 anoshandisa tekinoroji yeTRR (Target Row Refresh), iyo yakagadzirirwa kudzivirira kusanganisa kwesero panguva yekurwiswa kweRowHammer.

Dambudziko nderekuti hapana nzira yakabatana yekushandisa TRR uye yega CPU neyekugadzira ndangariro vanodudzira TRR nenzira yavo, vachishandisa yavo yekuzvidzivirira sarudzo uye vasina kuburitsa ruzivo rwekushandisa.

Kudzidza nzira dzinoshandiswa nevagadziri kuvhara RowHammer kwakaita kuti zvive nyore kutsvaga nzira dzakatenderedza dziviriro.

Panguva yekusimbisa, zvakazoitika kuti "chengetedzo nekusaziva" musimboti unoshandiswa nevagadziri panguva yeTrR kuitisa unongobatsira kudzivirira mune dzakakomba zviitiko, kufukidza kwakajairika kurwisa kunochinja shanduko mutoro wesero mune imwechete kana miviri mitsara iripedyo.

Izvo zvinoshandiswa zvakagadzirwa nevatsvakurudzi zvinotibvumidza kuyedza kubata kwezviputi kune yakasarudzika RowHammer yekurwisa sarudzo, umo kuyedza kunoitwa kukurudzira kurodha kwemitsara yakati wandei yememori maseru panguva imwe chete.

Kurwiswa kwakadai kunogona kupfuura kudzivirirwa kweTrR inoitwa nevamwe vagadziri uye inotungamira kune yekurangarira zvishoma kukanganisa kunyange pamakomputa matsva ane DDR4 memory.

Pamakumi mana eDIMM akadzidzwa, gumi nematatu vaive panjodzi kune asiri-akajairwa RowHammer kurwisa sarudzo, kunyangwe ichinzi inodzivirirwa. SK Hynix, Micron uye Samsung inotangisa matambudziko mamodule, ane zvigadzirwa zvinofukidza 95% yemusika weDRAM.

Pamusoro peDDR4, LPDDR4 machipisi anoshandiswa mune nhare mbozha akafundwa zvakareque vaivewo nehanya yezvemberi RowHammer kurwisa sarudzo. Kunyanya, ndangariro dzinoshandiswa muGoogle Pixel, Google Pixel 3, LG G7, OnePlus 7 uye Samsung Galaxy S10 mafoni akanganiswa.

Vatsvakurudzi vakakwanisa kubereka nzira dzakasiyana siyana dzekushandisa paDDR4 machipisi zvinonetsa.

Iko kushandiswa kweRowHammer kushandisa kwePTE (zvinyorwa zvematafura epeji) kunodiwa kuti uwane mukana wekurwisa kernel mukati memasekondi 2.3 kusvika kumaawa matatu nemasekondi gumi neshanu, zvinoenderana nemachipisi ari kuyedzwa.

Kurwiswa kwekukuvadzwa kweRSA-2048 kiyi yeruzhinji yakachengetwa mundangariro yakatora kubva pamasekondi 74.6 kusvika pamaminetsi makumi matatu nemasere nemasekondi makumi maviri nemasere. Kurwiswa kwekunzvenga mvumo nekugadzirisa ndangariro yeiyo sudo maitiro kwakatora maminetsi makumi mashanu nemashanu nemasekondi gumi nematanhatu.

Kuti uedze DDR4 memory chips inoshandiswa nevashandisi, TRRespass utility yakaburitswa. Kurwiswa kwakabudirira kunoda ruzivo nezve maratidziro edhiresi epanyama anoshandiswa mune yekudzora ndangariro zvine chekuita nemabhangi uye mitsara yemaseru endangariro.

Kuti uone mamiriro acho, iro basa rekushandisa rakagadziriswazve, iro rinoda kutanga nerombo remidzi. Munguva pfupi iri kutevera, zvinorongwawo kushambadza chikumbiro kuyedza ndangariro dzema smartphones.

Intel uye AMD makambani anokurudzira kuchengetedza kushandiswa kwendangariro nekanganiso kururamisa (ECC), vatongi vekurangarira nerutsigiro rweMAC uye vanoshandisa yakakwira zororo zororo.

mabviro: https://www.vusec.net


Iva wekutanga kutaura

Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa. Raida minda anozivikanwa ne *

*

*

  1. Inotarisira data: AB Internet Networks 2008 SL
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako