Full Report
Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD confidential computing by silently dropping writes to a server's memory, so the processor keeps reading old encrypted data as if it were current. The attack requires an attacker who already controls the server's software and can briefly access the machine to insert a small circuit
Analysis Summary
# Vulnerability: DDRop Hardware Attack on Confidential Computing
## CVE Details
* **CVE ID:** Not yet assigned (Research disclosed September 2024/2026 context)
* **CVSS Score:** N/A (Hardware-level architectural flaw)
* **CWE:** CWE-601: Design Whirlpool / CWE-440: Expected Behavior Violation (specifically regarding **Freshness** in memory integrity)
## Affected Systems
* **Products:**
* Intel CPUs supporting Trust Domain Extensions (TDX) and Scalable SGX.
* AMD CPUs supporting Secure Nested Paging (SEV-SNP).
* **Versions:** Current generation server processors utilizing DDR5 memory.
* **Configurations:** Cloud environments utilizing Confidential Computing to isolate guest Virtual Machines (VMs) from the host/provider.
## Vulnerability Description
DDRop is a physical hardware attack that exploits the lack of **"freshness"** guarantees in current confidential computing architectures. While technologies like TDX and SEV-SNP ensure memory is encrypted and has "logical integrity" (detecting if data was modified by an unauthorized party), they do not verify that the data being read is the *most recent* version written.
The attack uses an **interposer**—a custom $200 circuit board placed between the CPU and DDR5 RAM. The interposer forces an error on the command bus during a "write" operation and simultaneously cuts the wire used by the RAM to report that error to the CPU. Consequently, the CPU believes the write was successful, but the RAM module discards the command, leaving "stale" (old) encrypted data in place. The CPU later reads this stale data, which still decrypts correctly because the encryption keys have not changed, allowing the attacker to manipulate the execution state of a protected VM.
## Exploitation
* **Status:** PoC available (Research presented by KU Leuven, ETH Zurich, Google, et al.)
* **Complexity:** High (Requires sophisticated knowledge of DDR5 timings and OS-level control)
* **Attack Vector:** Physical (Requires brief physical access to the server hardware to install the interposer).
## Impact
* **Confidentiality:** **High** (Allows reading of victim VM memory and toggling debug modes to extract plaintext data).
* **Integrity:** **High** (Allows hijacking page tables to map attacker memory onto physical addresses and forging launch attestations).
* **Availability:** **Medium** (Can lead to system instability or controlled crashes).
## Remediation
### Patches
* There are currently no software "patches" that fully resolve the underlying architectural lack of memory freshness in DDR5 implementations for TDX/SEV-SNP.
### Workarounds
* **Enable Cryptographic Integrity:** On Intel TDX, using the optional "Cryptographic Integrity" mode provides better protection against cross-VM data tampering, though researchers suggest it may still be vulnerable to attestation forgery.
* **Physical Security:** Strict access control to server racks and hardware anti-tamper mechanisms (chassis intrusion detection).
* **Hardware Glue/Epoxy:** Some data centers use physical bonding agents on DIMM slots to prevent the insertion of interposers.
## Detection
* **Indicators of Compromise:** Discrepancies in remote attestation reports (though these can be forged by the attack).
* **Detection Methods:** Physical inspection of server hardware for unauthorized components between the RAM and the motherboard. Monitoring for unexpected memory bus errors or parity warnings that might be side effects of the interposer's interference.
## References
* DDRop Research Site: hxxps[://]ddropattack[.]eu/
* Research Paper: hxxps[://]ddropattack[.]eu/ddrop[.]pdf
* Source Code/Design: hxxps[://]github[.]com/ddropattack/ddrop
* Technical News: hxxps[://]thehackernews[.]com/2026/09/new-ddrop-attack-breaks-intel-tdx-and.html