Researchers have found a way to hack the memory on some virtual machines using a Raspberry Pi

HardwareResearchers have found a way to hack the memory on some virtual machines using a Raspberry PiWhen you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.

When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.

(Image credit: Getty Images / Alvaro Gonzalez)

Motherboard with Multiple Memory Slots for High Performance Computing

Designed with cloud computing security in mind, AMD’s Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP), which is an incredibly long and serious name to suggest how complicated it is, has recently seen a rather worrying security breach, involving RAM and a Raspberry Pi.

In it, the researchers used a Raspberry Pi Pico to “unlock and modify DDR4 and DDR5 SPDs”, where the SEV-SNP safeguard lies, to create memory aliases. These can then be used to “manipulate memory mappings and corrupt or replay ciphertext, culminating in a devastating end-to-end attack”.

Once into the SDP, the Raspberry Pi can be used to disable and write protection and alter its contents. Ghost bits can then be made in the DIMM, which are “invisible to the memory controller”. This can allow the controller of the Raspberry Pi to navigate software restrictions, or even enable “software-only attacks”.

The Raspberry Pip Pico and DDR sockets required to do this cost “approximately $10” and can be sourced fairly easily. You will need a 7-10 V source, like a battery, but a malicious actor could get ahold of the necessary equipment with ease. If you’re particularly techy, or get a little too ambitious with your hobbies, there’s a chance you already have most of this gear lying around.

Where malicious actors might struggle is in gaining physical access in order to do this method. The paper also notes that two Corsair DDR4 DIMMs taken off the shelf left “the base configuration entirely unprotected, possibly exposing them to software-only BadRAM attacks.” This means, rarely, you can do this method without physical access.

The biggest gaming news, reviews and hardware deals

Importantly, the paper notes times when physical access can be possible without it being particularly strange, like a “malicious employee at a cloud service provider”. Notably, this access would leave no physical trace behind.

This problem was reported to AMD, whichnow labels ita 5.3 (medium) severity problem, and there’s a fix, too.

Best gaming PC: The top pre-built machines.Best gaming laptop: Great devices for mobile gaming.

Best gaming PCBest gaming laptop

Best gaming PC: The top pre-built machines.Best gaming laptop: Great devices for mobile gaming.

TOPICSHardware

TOPICS

More about hardwareIf you’re trying to convince me your ‘companionship’ robot is ‘lifelike’, maybe don’t rip her face off in the demo videoIs the new RTX 5070 really as fast as Nvidia’s previous flagship RTX 4090 GPU? Turns out the answer is yes. Kinda.LatestCivilization 7 has been Steam Deck Verified ahead of its launch next monthSee more latest►

More about hardware

If you’re trying to convince me your ‘companionship’ robot is ‘lifelike’, maybe don’t rip her face off in the demo videoIs the new RTX 5070 really as fast as Nvidia’s previous flagship RTX 4090 GPU? Turns out the answer is yes. Kinda.

A robot having its face pulled off

If you’re trying to convince me your ‘companionship’ robot is ‘lifelike’, maybe don’t rip her face off in the demo video

Nvidia RTX 5070 graphics card

Is the new RTX 5070 really as fast as Nvidia’s previous flagship RTX 4090 GPU? Turns out the answer is yes. Kinda.

LatestCivilization 7 has been Steam Deck Verified ahead of its launch next monthSee more latest►

Latest

Civilization 7 has been Steam Deck Verified ahead of its launch next month

Digital Ben Franklin looking very perturbed on dark background

Civilization 7 has been Steam Deck Verified ahead of its launch next month

See more latest►

Most PopularIf you’re trying to convince me your ‘companionship’ robot is ‘lifelike’, maybe don’t rip her face off in the demo videoSquare Enix launches new anti-harassment policy to protect its employees and partners from abusive fansThe Sims begins its 25th anniversary celebration next week with a Behind The Sims episode of news and announcementsPath of Exile 2 numberlord spends 16 straight days killing rare monsters to prove that a stat that makes loot better makes better lootPalestinian developer raises more than $200,000 to make Dreams on a Pillow, a game about the horrors of the 1948 NakbaPiranha Games will lay off employees after Mechwarrior 5: Clans ‘performed below projections’Marvel Rivals’ latest update quietly killed the game’s burgeoning mod sceneSorry everyone, Minecraft 2 is cancelled, and it might be our faultTeam Fortress 2 just had the single biggest trade in its history, with ‘the absolute best hat you can get’ going for around $40KIs the new RTX 5070 really as fast as Nvidia’s previous flagship RTX 4090 GPU? Turns out the answer is yes. Kinda.Elden Ring: Nightreign is getting a closed network test, and I’m totally not fuming because PC players aren’t invited to the party, or anything

Most Popular

If you’re trying to convince me your ‘companionship’ robot is ‘lifelike’, maybe don’t rip her face off in the demo video

Square Enix launches new anti-harassment policy to protect its employees and partners from abusive fans

The Sims begins its 25th anniversary celebration next week with a Behind The Sims episode of news and announcements

Path of Exile 2 numberlord spends 16 straight days killing rare monsters to prove that a stat that makes loot better makes better loot

Palestinian developer raises more than $200,000 to make Dreams on a Pillow, a game about the horrors of the 1948 Nakba

Piranha Games will lay off employees after Mechwarrior 5: Clans ‘performed below projections’

Marvel Rivals' latest update quietly killed the game’s burgeoning mod scene

Sorry everyone, Minecraft 2 is cancelled, and it might be our fault

Team Fortress 2 just had the single biggest trade in its history, with ‘the absolute best hat you can get’ going for around $40K

Is the new RTX 5070 really as fast as Nvidia’s previous flagship RTX 4090 GPU? Turns out the answer is yes. Kinda.

Elden Ring: Nightreign is getting a closed network test, and I’m totally not fuming because PC players aren’t invited to the party, or anything

HARDWARE BUYING GUIDESLATEST GAME REVIEWS1Best Steam Deck accessories in Australia for 2025: Our favorite docks, powerbanks and gamepads2Best graphics card for laptops: the mobile GPUs I’d want in my next gaming laptop3Best mini PCs in 2025: The compact computers I love the most4Best 14-inch gaming laptop: The top compact gaming laptops I’ve held in these hands5Best Mini-ITX motherboards in 2025: My pick from all the mini mobo marvels I’ve tested1Thank Goodness You’re Here! review2Shiren the Wanderer: The Mystery Dungeon of Serpentcoil Island review3WD Black SN850X 8 TB NVMe SSD review4Ikea Utespelare desk review5Asus ROG Harpe Ace Mini wireless mouse review

HARDWARE BUYING GUIDESLATEST GAME REVIEWS

1Best Steam Deck accessories in Australia for 2025: Our favorite docks, powerbanks and gamepads

A bunch of the best Steam Deck accessories on a blue background.

1Best Steam Deck accessories in Australia for 2025: Our favorite docks, powerbanks and gamepads

Best Steam Deck accessories in Australia for 2025: Our favorite docks, powerbanks and gamepads

2Best graphics card for laptops: the mobile GPUs I’d want in my next gaming laptop

Best graphics card for laptops: the mobile GPUs I’d want in my next gaming laptop

3Best mini PCs in 2025: The compact computers I love the most

Best mini PCs in 2025: The compact computers I love the most

4Best 14-inch gaming laptop: The top compact gaming laptops I’ve held in these hands

Best 14-inch gaming laptop: The top compact gaming laptops I’ve held in these hands

5Best Mini-ITX motherboards in 2025: My pick from all the mini mobo marvels I’ve tested

Best Mini-ITX motherboards in 2025: My pick from all the mini mobo marvels I’ve tested

1Thank Goodness You’re Here! review

Thank Goodness You’re Here review

1Thank Goodness You’re Here! review

Thank Goodness You’re Here! review

2Shiren the Wanderer: The Mystery Dungeon of Serpentcoil Island review

Shiren the Wanderer: The Mystery Dungeon of Serpentcoil Island review

3WD Black SN850X 8 TB NVMe SSD review

WD Black SN850X 8 TB NVMe SSD review

4Ikea Utespelare desk review

Ikea Utespelare desk review

5Asus ROG Harpe Ace Mini wireless mouse review

Asus ROG Harpe Ace Mini wireless mouse review

The biggest gaming news, reviews and hardware deals#

The biggest gaming news, reviews and hardware deals