Security researcher Christopher Domas has released an open-source hardware security project called skitter-creek-bath-salts that demonstrates a novel attack on DRAM controllers, breaking CPU memory isolation. The project, presented at the 2026 USENIX Security Symposium, targets the physical memory hierarchy by manipulating DRAM row activation to cause bit flips in adjacent rows, a technique known as Rowhammer.
According to Domas's research, the attack exploits the DRAM controller's row buffer management to induce conflicts between memory rows, leading to data corruption that bypasses traditional privilege boundaries. This allows an unprivileged process to read and modify kernel memory, effectively compromising the security of the entire system.
The project includes a proof-of-concept that demonstrates the attack on modern DDR4 and DDR5 memory modules. Domas emphasizes that the vulnerability is inherent to DRAM technology and cannot be fully mitigated by software patches alone. He recommends hardware-level defenses such as error-correcting code (ECC) memory and enhanced row refresh mechanisms.
This work highlights the growing importance of hardware security in an era where software vulnerabilities are increasingly mitigated. The open-source release aims to encourage further research and development of defenses against such physical memory attacks.
