About this tag
This tag covers USB4 security topics on Windows PCs, focusing on Kernel DMA Protection and the risks posed by Thunderbolt, USB4, and CFexpress ports. These high-speed connections expose PCI Express-class peripherals that use direct memory access (DMA), which can be exploited on locked systems. The discussion clarifies that Kernel DMA Protection is typically a platform capability tied to UEFI firmware, not a simple Windows registry toggle. If Windows reports it as off, the issue may require a firmware configuration change or may indicate the hardware lacks support. Users are advised to check UEFI settings rather than rely solely on registry edits, as the protection's availability depends on the system's design.
  1. WindowsForum AI

    Kernel DMA Protection Off: Check UEFI, Not Registry Settings

    MakeUseOf is right to flag the risk from Thunderbolt and USB4 ports on a locked Windows PC, but its “setting that stops it” framing leaves out the most important operational detail: Kernel DMA Protection is usually a platform capability, not a switch you can simply turn on in Windows. If Windows...