[Paper Review] TeleHammer : A Stealthy Cross-Boundary Rowhammer Technique

Zhi Zhang, Yueqiang Cheng+3 more|arXiv (Cornell University)|Dec 6, 2019

Security and Verification in Computing17 references4 citations

TL;DR

This paper introduces TeleHammer, a novel rowhammer attack that bypasses software-only defenses by exploiting hardware features to hammer victim rows across memory boundaries—specifically, by leveraging page-table translation to induce bit flips in protected kernel-level page-table entries. Unlike traditional PeriHammer attacks, TeleHammer operates stealthily across user-kernel boundaries without requiring direct access to hammer rows, enabling privilege escalation on hardened systems.

ABSTRACT

Rowhammer exploits frequently access specific DRAM rows (i.e., hammer rows) to induce bit flips in their adjacent rows (i.e., victim rows), thus allowing an attacker to gain the privilege escalation or steal the private data. A key requirement of all such attacks is that an attacker must have access to at least part of a hammer row adjacent to sensitive victim rows. We refer to these rowhammer attacks as PeriHammer. The state-of-the-art software-only defences against PeriHammer attacks is to make such hammer rows inaccessible to the attacker. In this paper, we question the necessity of the above requirement and propose a new class of rowhammer attacks, termed as TeleHammer. It is a paradigm shift in rowhammer attacks since it crosses memory boundary to stealthily rowhammer an inaccessible row by virtue of freeloading inherent features of modern hardware and/or software. We propose a generic model to rigorously formalize the necessary conditions to initiate TeleHammer and PeriHammer, respectively. Compared to PeriHammer, TeleHammer can defeat the advanced software-only defenses, stealthy in hiding itself and hard to mitigate. To demonstrate the practicality of TeleHammer and its advantages, we have created a TeleHammer's instance, called PThammer, which leverages the address-translation feature of modern processors. We observe that a memory access can induce a fetch of a Level-1 page-table entry (PTE) from memory and thus cause hammering the PTE once. To achieve a high hammer-frequency, we flush relevant TLB and cache effectively and efficiently. To this end, PThammer can cross user-kernel boundary to rowhammer rows occupied by Level-1 PTEs and induce bit flips in adjacent victim rows that also host Level-1 PTEs. We have exploited PThammer to defeat advanced software-only defenses in bare-metal systems.

Motivation & Objective

• To challenge the assumption that direct access to hammer rows is necessary for rowhammer attacks.
• To address the limitations of software-only defenses that assume hammer rows are isolated from attackers.
• To design and implement a new class of rowhammer attack—TeleHammer—that operates across memory boundaries using existing hardware mechanisms.
• To demonstrate that advanced software-only defenses can be defeated by leveraging address-translation features in modern processors.

Proposed method

• Formalizing the conditions for both TeleHammer and PeriHammer attacks using a generic model to distinguish their operational boundaries.
• Exploiting the address-translation mechanism in modern processors to trigger memory accesses that fetch Level-1 page-table entries (PTEs), thereby inducing rowhammer effects on adjacent PTE rows.
• Flushing the TLB and caches to increase hammering frequency and ensure consistent bit-flip induction on victim rows.
• Targeting Level-1 PTEs in kernel memory as victim rows, which are typically protected from user-space access.
• Using the inherent freeloading behavior of memory access and page-table traversal to initiate rowhammer without direct access to hammer rows.
• Implementing PThammer as a proof-of-concept instance that demonstrates cross-boundary rowhammer exploitation on bare-metal systems.

Experimental results

Research questions

• RQ1 Can rowhammer attacks be executed without direct access to hammer rows by leveraging hardware address-translation features?
• RQ2 How can existing software-only defenses be bypassed using hardware-induced rowhammer effects across memory boundaries?
• RQ3 What are the necessary conditions for a stealthy, cross-boundary rowhammer attack to succeed in modern systems?
• RQ4 To what extent can the frequency and reliability of bit flips be increased through cache and TLB management?
• RQ5 Can kernel-protected memory regions, such as Level-1 PTEs, be targeted via indirect rowhammer techniques?

Key findings

• TeleHammer successfully induces bit flips in victim rows that are inaccessible to the attacker by exploiting the memory access pattern triggered during page-table lookup.
• The PThammer prototype demonstrates that cross-user-kernel boundary rowhammer attacks are feasible using only standard processor features, without requiring hardware modifications.
• By flushing the TLB and caches, PThammer achieves a high hammering frequency sufficient to reliably induce bit flips in adjacent PTE rows.
• The attack defeats advanced software-only defenses that assume isolation of hammer rows from user-space.
• The method leverages existing, freeloading hardware mechanisms to achieve stealth and bypass traditional mitigation strategies.
• The results confirm that modern systems remain vulnerable to rowhammer attacks even when traditional attack vectors are blocked.