Intel TDX and AMD SEV-SNP freshness gap security flaw
Vulnerability
Summary
Hide ▲
Show ▼
A freshness flaw in Intel TDX and AMD SEV-SNP lets a DDR5 interposer attack make stale encrypted memory look current, undermining confidential-computing integrity. The weakness affects cloud servers that rely on scalable memory encryption and can be abused after brief physical access to the machine. The same design gap also extends to Intel Scalable SGX, and the disclosed attack can read or alter protected memory without the encryption engine detecting the tampering. No simple patch exists; only mitigations such as limiting vulnerable memory-management features or checking whether critical writes landed can reduce risk.
Related Happenings
DDRop active interposer attack analysis on DDR5 confidential-computing memory protection
Technical Analysis
H score10
First: 14.09.2026 19:58
Last: 14.09.2026 19:58
Sources 1
How related:
Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's memory, so the processor keeps reading old encrypted data as if it were current.
About this happening:
Researchers disclosed DDRop, a hardware interposer attack that breaks Intel TDX and AMD SEV-SNP memory protection on DDR5 cloud servers, letting stale encrypte...
DDRop active interposer attack analysis on DDR5 confidential-computing memory protection
Technical AnalysisHow related: Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's memory, so the processor keeps reading old encrypted data as if it were current.
About this happening: Researchers disclosed DDRop, a hardware interposer attack that breaks Intel TDX and AMD SEV-SNP memory protection on DDR5 cloud servers, letting stale encrypte...
NVIDIA GPUThor mitigation advisory
Advisory/Mitigation
H score29
First: 26.08.2026 21:48
Last: 26.08.2026 21:48
Sources 1
About this happening:
University of Toronto researchers disclosed GPUThor, a Rowhammer attack against NVIDIA workstation GPUs with GDDR6 memory that can bypass ECC, trigger denial...
NVIDIA GPUThor mitigation advisory
Advisory/MitigationAbout this happening: University of Toronto researchers disclosed GPUThor, a Rowhammer attack against NVIDIA workstation GPUs with GDDR6 memory that can bypass ECC, trigger denial...
AMD Zen 1 through Zen 4 Safe RET Interrupt security flaw
Vulnerability
H score37
First: 06.08.2026 19:17
Last: 06.08.2026 19:17
Sources 1
About this happening:
Safe RET Interrupt Vulnerability affects Zen 1 through Zen 4 processors, where a local attacker can time an interrupt injection to weaken Safe RET and expose kerne...
AMD Zen 1 through Zen 4 Safe RET Interrupt security flaw
VulnerabilityAbout this happening: Safe RET Interrupt Vulnerability affects Zen 1 through Zen 4 processors, where a local attacker can time an interrupt injection to weaken Safe RET and expose kerne...
INTERRUPT INJECTION TONTOU analysis bypassing Spectre v2 defenses on Linux
Technical Analysis
H score24
First: 06.08.2026 19:17
Last: 06.08.2026 19:17
Sources 1
About this happening:
MIT CSAIL researchers disclosed INTERRUPT INJECTION, a TONTOU timing primitive that can bypass Spectre v2 defenses on Linux by using unprivileged code to s...
INTERRUPT INJECTION TONTOU analysis bypassing Spectre v2 defenses on Linux
Technical AnalysisAbout this happening: MIT CSAIL researchers disclosed INTERRUPT INJECTION, a TONTOU timing primitive that can bypass Spectre v2 defenses on Linux by using unprivileged code to s...
Nvidia GPU GPUBreach Rowhammer-style page-table corruption privilege-escalation flaw
Vulnerability
H score19
First: 07.04.2026 14:31
Last: 07.04.2026 14:31
Sources 1
About this happening:
Researchers demonstrated GPUBreach, a Rowhammer-style weakness in Nvidia GPUs that can corrupt GPU page tables and enable arbitrary read-write access. When pai...
Nvidia GPU GPUBreach Rowhammer-style page-table corruption privilege-escalation flaw
VulnerabilityAbout this happening: Researchers demonstrated GPUBreach, a Rowhammer-style weakness in Nvidia GPUs that can corrupt GPU page tables and enable arbitrary read-write access. When pai...
Timeline
-
14.09.2026 19:58 2 articles · 2h ago
Researchers disclose DDRop write-dropping attack against Intel TDX and AMD SEV-SNP
Initial DisclosureResearchers disclosed DDRop, a hardware interposer attack against DDR5 cloud servers that silently drops memory writes so old encrypted values can be reused as current ones. The attack targets Intel TDX, Intel Scalable SGX, and AMD SEV-SNP by exploiting the missing freshness check in scalable memory encryption, and it requires brief physical access plus a cheap interposer placed on the memory bus.
Show sources
- New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing — thehackernews.com — 14.09.2026 19:58
- New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing — thehackernews.com — 14.09.2026 19:58