The technical details have been published: https://ghostwriteattack.com/riscvuzz.pdf https://ghostwriteattack.com/riscvuzz.pdf ; t0 = physical address, a0

The technical details have been published: https://ghostwriteattack.com/riscvuzz.pdf https://ghostwriteattack.com/riscvuzz.pdf ; t0 = physical address, a0 = byte to be written vsetvli zero, zero, e8, m1 vmv.v.x v0, a0 ; encoded: 0x10028027 vse128.v v0, 0(t0) So it's really quite bad for those CPUs.