Intel SGX and AMD SEV-SNP / DRAM interposer (memory aliasing): Battering RAM: a cheap DRAM interposer that aliases

UnscoredNCVD-2025-002-intel-sgx-and-amd-sev-snp-dram-iFirmware, BMC & network fabricBattering RAMcurated

Impact

Battering RAM: a cheap DRAM interposer that aliases physical addresses so the same ciphertext is served for two different locations, defeating the memory-encryption protections of both Intel SGX and AMD SEV-SNP and giving the attacker plaintext access to enclave and confidential-VM memory. Same operator conclusion as WireTap and it generalises across both vendors' confidential-compute stacks, so it is not a reason to switch silicon.

Who can reach it

Physical access to install an interposer on the DIMM path. Applies to any deployment where hardware is not continuously in your physical custody.

What to do

No firmware or microcode fix on affected parts - the attack targets a design property of deterministic memory encryption. Treat confidential compute as protecting against a remote or software-privileged adversary, not a physical one, and write that into what you tell customers. Physical security, tamper-evident hardware and custody controls are the actual mitigation.

References

https://batteringram.eu/

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.