TECHNIQUES FOR SHARED VIRTUAL MEMORY ACCESS PROTECTION

    公开(公告)号:US20180285262A1

    公开(公告)日:2018-10-04

    申请号:US15476918

    申请日:2017-03-31

    Abstract: Various embodiments described herein include an input/output memory management unit (IOMMU) that can restrict write accesses originating from a shared virtual memory (SVM) device towards a CPU's code page, so that the SVM device cannot be used to attack and manipulate the CPU's behavior. In some embodiments, the IOMMU may perform a security check so that whenever a write request arrives from an SVM device, if the page requested is present and is executable, an access violation fault is generated and the request is terminated. In some such embodiments, this may prevent a malicious or vulnerable device from corrupting the CPU's process memory and causing an arbitrary code execution with the CPU process's privileges.

Patent Agency Ranking