With the new RAMbleed attack making some news, I'd like to understand my vulnerability level.
The news reports say that we should use DDR4 with TRR enabled, but I'm unable to find a way to check if my server RAM (Samsung M391A2K43BB1-CPB) has it. No info available in dmidecode and the specs from Samsung don't mention it.
I've seen indications that Micron DDR4 has it. Any info from other vendors? It's sad that the messaging is 'upgrade your RAM', but we have no idea which RAM is good.
Yeah, I know that the attack requires local access (and thus is lower severity).
The news reports say that we should use DDR4 with TRR enabled, but I'm unable to find a way to check if my server RAM (Samsung M391A2K43BB1-CPB) has it. No info available in dmidecode and the specs from Samsung don't mention it.
I've seen indications that Micron DDR4 has it. Any info from other vendors? It's sad that the messaging is 'upgrade your RAM', but we have no idea which RAM is good.
Yeah, I know that the attack requires local access (and thus is lower severity).