Protecting systems with the TPM

On the other hand, XTS is wide block, which makes exploiting this weakness somewhat tricky. You'd either need to find an interesting valid block and replay it (which is doable under some circumstances) or replace a 512-byte block with random garbage and hope that does something interesting.

On the pessimistic side, the rowhammer exploit is a great example of a way that random poorly-controlled corruption can sometimes lead to privilege escalation.