A newly disclosed hardware-side-channel attack, named DDRop, has been revealed to compromise the confidential computing environments of both Intel and AMD processors. According to the report, the attack targets the memory integrity guarantees provided by Intel TDX and AMD SEV-SNP, which are designed to protect sensitive workloads from unauthorized access, even from privileged software.
The DDRop attack operates by exploiting a physical access vector. An attacker who already controls the server's software and has brief physical or local access to the machine can insert a small circuit that silently drops memory write commands. Because the attack targets the memory subsystem at a hardware level, the processor continues to execute instructions and read from memory, but the data retrieved is stale - representing old encrypted data that was present before the write operation was dropped.
The implications are significant for confidential computing deployments. If an attacker can manipulate memory contents in this manner, the isolation guarantees that protect virtual machines and trust domains may be circumvented. This could potentially allow the exposure or manipulation of data that should remain isolated and encrypted. The attack does not require breaking the encryption of the memory itself, but rather bypasses the integrity checks that ensure the processor sees a consistent and up-to-date view of memory.
As of the disclosure date, no public exploit code has been released. The attack requirements specify that the adversary must already have control over the server's software stack and the ability to briefly access the target machine to implant the necessary hardware circuit. This limits the immediate risk to scenarios where an insider threat or an attacker with persistent local access is present.
Intel and AMD have not released official patch statements at the time of this report. Mitigation is expected to require microcode or firmware updates from the vendors, alongside potential hardware revisions. Security teams utilizing confidential computing are advised to monitor vendor advisories and reassess physical and logical access controls for affected systems.
