Skip to main content

Share story

Security

Researcher demonstrates possible SMM synchronization bypass on one Ryzen system

A very very very very very very very long interrupt - xoreaxeaxeax/smiiiiiiiiiiiiiiii Image: Primary
Security researcher Christopher Domas published a proof of concept that aims to desynchronize x86 System Management Mode across CPU cores using an unusually long machine instruction. The project says its default technique, a slow MMIO load, was tuned for a Zen 3 Ryzen 7 5800H and may require retuning on other systems. It argues that a core left outside SMM could modify shared memory while SMM code executes, potentially making existing time-of-check/time-of-use flaws exploitable from software rather than requiring DMA-capable hardware.
Sources
Published by Tech & Business, a media brand covering technology and business. This story was sourced from github.com and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Products
Products

Quest Global acquires wearable testing provider Tests Assured

Quest Global has acquired Tests Assured, adding specialized testing for wearable devices, immersive technologies, and connected hardware and software to its engineering services business. The U.S. company tests smart glasses and augmented, virtual and extended reality products.

Capital Infrastructure
Capital Infrastructure

Mavria raises $130M for truck-shippable data centers

Mavria raised $130M across pre-seed and seed rounds at a $1B valuation, with Paradigm leading the financing, The Wall Street Journal reported. The company aims to build modular data centers that can be shipped by truck.