AMD secure VM tech undone by DRAM meddling

Researchers disclosed "BadRAM," an SPD (Serial Presence Detect) aliasing attack that manipulates DIMM identification to trick CPUs into creating physical memory aliases and bypass AMD SEV-SNP protections, enabling extraction of secrets from encrypted VMs; the PoC affects DDR4/DDR5, was reported to AMD (CVE-2024-21944), and can be mitigated by using SPD-locked memory, firmware updates, and physical system security.