News DaMAgeCard SD Express card vulnerability leverages the privileged access that PCIe provides — bypasses traditional software-based security mechanisms

[Admin]

The vulnerability arises from the integration of PCI Express (PCIe) technology in SD Express cards, which is utilized to enable faster data transfer rates.

DaMAgeCard SD Express card vulnerability leverages the privileged access that PCIe provides — bypasses traditional software-based security mechanisms : Read more

 

[jlake3]

Oh no! Not SD Express! Whole tens of people are in danger!

 

[Notton]

I'm not familiar with PCIe malware protection, but why is only SD express affected?
Like what about oculink or an open m.2 nvme slot? Why are those not affected by this exploit?

 

[jlake3]

I'm not familiar with PCIe malware protection, but why is only SD express affected?
Like what about oculink or an open m.2 nvme slot? Why are those not affected by this exploit?

It’s not exclusive to SD Express, but SD Express is uniquely vulnerable because it’s hot pluggable, the standard doesn’t require implementing IOMMU to limit address visibility, and SD cards are more commonly exchanged and given less scrutiny. Thunderbolt used to have the same vulnerability, but Intel VT-d or AMD-Vi (or equivalent) is now mandatory for Thunderbolt implementations.

OCuLink is theoretically vulnerable to DMA attacks along with other malicious PCIe devices, but OCuLink or m.2 can’t be connected while the system is running and data is already in memory, and you’re much less likely to be swapping around and connecting OCuLink or m.2 devices of unknown provenance.

 

[bit_user]

Aren't IOMMUs enabled by default, for like a while, now? I'd guess any PC new enough to have a SD Express card reader is going to have an IOMMU and it's going to be enabled.

 

[froggx]

Aren't IOMMUs enabled by default, for like a while, now? I'd guess any PC new enough to have a SD Express card reader is going to have an IOMMU and it's going to be enabled.

I built an AM5 based system back in February this year and IOMMU defaulted to disabled. The last 2 laptops i got (several years ago, 7th and 8th gen intel core CPUs) also defaulted disabled. Of course, I don't know if this speaks to most new systems.