Memory dedup exploitation resilience

[Rudd-O]

Qubes OS version (e.g., R3.1):

Any.

Affected TemplateVMs (e.g., fedora-23, if applicable):

Not pertinent.

There appears to be a way to reliable exploit a combo of Rowhammer and kernel samepage merging / Xen memory dedup: http://www.cs.vu.nl//~kaveh/pubs/pdf/dedup-sp16.pdf -- by the nature of the attack, this might work in a cross-VM fashion.

IF there exist any facilities that would enable such an exploit on Qubes OS, there should be a setting defaulting to off to toggle those facilities.

[marmarek]

We don't use any memory deduplication (which in Xen is only part of experimental, unsupported, disabled by default "tmem").

[marmarek]

We don't use any memory deduplication (which in Xen is only part of experimental, unsupported, disabled by default "tmem").