Riot Games Uncovers Motherboard Flaw Exploited by PC Cheaters

▼ Summary
– A security flaw in many recent motherboards could be exploited by cheaters to bypass anti-cheat software undetected.
– Major motherboard manufacturers like Asrock, Asus, Gigabyte, and MSI have released BIOS updates to fix this vulnerability.
– The flaw allowed DMA hardware devices to circumvent IOMMU protections that were not properly initializing at boot.
– Riot Games’ Vanguard anti-cheat may now require a BIOS update to play Valorant, and other anti-cheat systems could follow.
– Closing this pre-boot loophole neutralizes an entire class of hardware cheats and raises the cost of unfair play.
A significant security vulnerability found in numerous modern motherboards has been exposed by Riot Games, a flaw that could have allowed cheaters to bypass anti-cheat systems entirely. Major hardware manufacturers like Asrock, Asus, Gigabyte, and MSI have now issued critical BIOS updates to resolve the problem. Riot’s security team warned that if left unaddressed, this particular weakness would have rendered all current DMA detection and prevention technologies useless across the entire gaming industry. The issue stems from cheats operating in a highly privileged system area that standard anti-cheat software does not monitor.
To protect its competitive shooter Valorant, Riot’s Vanguard anti-cheat is now prompting players to install these updated BIOS versions. It is highly likely that other game publishers and anti-cheat providers will implement similar requirements for their own titles. The core of the vulnerability involves Direct Memory Access hardware devices, which are typically plugged into a computer’s PCIe slots. These DMA devices could exploit a flaw in how the system’s Input-Output Memory Management Unit protections initialized during startup.
Riot provided a clear analogy, stating the system’s security “bouncer” seemed to be on duty but was actually asleep at his post. This lapse created a window of opportunity for malicious hardware to access system memory without proper authorization, effectively going undetected. The company emphasized that while issuing BIOS updates might seem less dramatic than announcing large ban waves, it represents a crucial move in the ongoing battle against sophisticated hardware-based cheating methods.
By sealing this pre-boot security loophole, developers are effectively neutralizing an entire category of advanced cheats that were previously considered untouchable. This action substantially increases the difficulty and cost for individuals attempting to gain an unfair advantage in online games. The collaborative effort between a software developer and multiple hardware vendors highlights the complex, multi-layered approach now required to maintain competitive integrity in modern gaming.
(Source: The Verge)





