Исходное сообщение
"Уязвимость в механизме виртуализации Intel VT-d позволяет вы..." Отправлено pavlinux, 16-Май-11 00:35
>>Короча так и запишем - Сетевухи Intel e1000e унылое  г...о, >>Intel VT-d дырявый тормоз. > Эм.. а что с сетевухами e1000e не так? > Нет, действительно что там? > Реально ничего по этому поводу не слышал, поэтому и интересуюсь для своего/общего > интереса/развития.. Generating MSI without access to device config space However, we have discovered that even without access to the device configuration space 10, still in case of many devices the driver would be able to program the device to generate an MSI, and consequently could still mount a software-only attack against VT-d. This is because many devices support a so called Scatter Gather mechanism, that allows to split one DMA transaction into several smaller ones, each destined to a different memory location11. The idea is to use such a scatter gather mechanism in order to generate a 4-byte memory write transaction that will just happen to be destined to a special 0xfeeXXXXX address – in other words to generate MSI using regular DMA write.