Exploiting the DRAM Rowhammer Bug to Gain Kernel Privileges
Explore the DRAM Rowhammer bug and its security implications in this Black Hat conference talk. Delve into the physics-level hardware problem that can be exploited to gain kernel privileges. Learn about the "Rowhammer" issue in DRAM, where repeated memory access can cause bit flips in adjacent rows. Discover how this reliability concern has been transformed into a practical security vulnerability. Examine two exploits that leverage bit flips, including an in-browser attack through NaCl and a method to escalate to kernel privileges. Understand the technical details of row hammering, including cache bypassing and double-sided hammering techniques. Explore mitigation strategies such as ECC memory, Target Row Refresh, and increased refresh rates. Gain insights into the broader implications of hardware-level vulnerabilities for system security.