4 ms·
And control of a PCIe device (with the usual lazy broken drivers that just ignore IOMMU) means full read and write access to all physical memory adresses, inclu
by corty 6y ago
And control of a PCIe device (with the usual lazy broken drivers that just ignore IOMMU) means full read and write access to all physical memory adresses, including OS kernel, firmware and NMI RAM areas and all applications. This gives an attacker the capability to compromise the hardware in very permanent ways. Nothing to take lightly or brush off as security absolutism.