Comment on CVE-2021-26333 - Flaw in AMD PSP chipset affects millions of computersparentComments−bravetraveler4yI think OS level mitigations like ASLR (address space layout randomization) can help...What causes (and avoids) it in drivers can be reproduced/bypassed elsewhere−usr11064yASLR might make exploits a more cumbersome to implement. But the PSP is a co-processor with full access to hardware. So it can read the kernel's memory maps and fully deterministically access whatever it wants to access.
Comments
I think OS level mitigations like ASLR (address space layout randomization) can help...
What causes (and avoids) it in drivers can be reproduced/bypassed elsewhere
ASLR might make exploits a more cumbersome to implement. But the PSP is a co-processor with full access to hardware. So it can read the kernel's memory maps and fully deterministically access whatever it wants to access.