Half Spectre, Full Exploit - vusec Hardening Rowhammer Attackswith Half-Spectre Gadgets

More information: vusec.net/projects/hal.... Joint work with Mathé Hertogh and Cristiano Giuffrida.

[2/3] We showcase the potential of PRELOAD+TIME by mounting the first crash-free #Rowhammer attack to corrupt PTEs and gain R/W access to the entire physical memory without relying on templating or memory massaging.

[1/3] Turns out those old MDS gadgets have new life... In our latest paper at #IEEESP , we show how attackers can construct PRELOAD+TIME, a new cache side-channel which takes advantage of these 'half-Spectre' gadgets.