一句话：提出 HyperHammer，利用 Rowhammer 位翻转突破 KVM 内存隔离并攻陷 hypervisor，证明硬件辅助虚拟化并非完全安全。
硬件辅助虚拟化通过隔离 guest VM 来支撑云环境的灵活性与安全性。然而，Rowhammer 等硬件漏洞可让攻击者修改无权访问的内存，威胁这一隔离承诺；已有攻击多只能影响同驻 VM，且依赖的关键组件已被禁用。本文研究 Rowhammer 对虚拟化系统的影响，提出 HyperHammer：它利用特定系统配置触发位翻转，突破 hypervisor 强制内存隔离，并进一步攻陷 hypervisor。由于利用 Rowhammer 位翻转需要高度特定的系统条件，该攻击仅在特殊配置上演示，因此更像概念验证而非直接现实威胁。尽管如此，该工作表明硬件辅助虚拟化不能完全保护 hypervisor，有决心的攻击者在充分工程化后可能实现完整的 hypervisor 攻陷。
Hardware-assisted virtualization is a key enabler of the modern cloud. It decouples virtual machine execution from the hardware it runs on, allowing increased flexibility through services such as dynamic hardware provisioning and live migration. Underlying this flexibility is the security promise that guest virtual machines are isolated from each other. However, due to the level of sharing between VMs, hardware vulnerabilities present a serious threat to this usage. One such vulnerability is Rowhammer, which allows attackers to modify the contents of memory to which they have no access. While the attack has been known for over a decade, published applications against such environments are limited, compromising only co-resident VMs, but not the hypervisor. Moreover, due to security concerns, a key component enabling their attack has been disabled. Hence, this attack is no longer applicable in a contemporary virtualized environment. In this paper, we examine how Rowhammer can affect virtualized systems. We present HyperHammer, a Rowhammer attack that breaks hypervisor-enforced memory isolation and further compromises the hypervisor. Due to the highly specific system requirements for leveraging Rowhammer bit flips, HyperHammer is demonstrated on a very particular system configuration. Therefore, as demonstrated, HyperHammer is more a proof-of-concept than an immediate threat to computer systems. Nonetheless, our work demonstrates that hardware-assisted virtualization does not fully protect the hypervisor, and that with sufficient engineering a determined attacker might achieve complete hypervisor compromise.
@inproceedings{ChenZZSYGYW25,
title = {HyperHammer: Breaking Free from KVM-Enforced Isolation},
author = {Wei Chen and Zhi Zhang and Xin Zhang and Qingni Shen and Yuval Yarom and Daniel Genkin and Chen Yan and Zhe Wang},
booktitle = {ASPLOS},
year = {2025},
doi = {10.1145/3676641.3716002}
}