{“lastseen”:”2026-05-06T12:05:10″,”description”:”A new rowhammer attack gives complete control of NVIDIA CPUs.\\n\\n\\u003e On Thursday, two research teams, working independently of each other, demonstrated attacks against two cards from Nvidia\u2019s Ampere generation that take GPU rowhammering into new–\u00adand potentially much more consequential–\u00adterritory: GDDR bitflips that give adversaries full control of CPU memory, resulting in full system compromise of the host machine. For the attack to work, IOMMU memory management must be disabled, as is the default in BIOS settings.\\n\\u003e \\n\\u003e \u201cOur work shows that Rowhammer, which is well-studied on CPUs, is a serious threat on GPUs as well,\u201d said Andrew Kwong, co-author of one of the papers. \\”GDDRHammer: Greatly Disturbing DRAM Rows\u00adCross-Component Rowhammer Attacks from Modern GPUs.\\” \\”With our work, we\u2026 show how an attacker can induce bit flips on the GPU to gain arbitrary read\/write access to all of the CPU\u2019s memory, resulting in complete compromise of the machine.\\”\\n\\u003e \\n\\u003e Update Friday, April 3: On Friday, researchers unveiled a third Rowhammer attack that also demonstrates Rowhammer attacks on the RTX A6000 that achieves privilege escalation to a root shell. Unlike the previous two, the researchers said, it works even when IOMMU is enabled.\\n\\nThe second paper is GeForge: Hammering GDDR Memory to Forge GPU Page Tables for Fun and Profit:\\n\\n\\u003e \u2026does largely the same thing, except that instead of exploiting the last-level page table, as GDDRHammer does, it manipulates the last-level page directory. It was able to induce 1,171 bitflips against the RTX 3060 and 202 bitflips against the RTX 6000.\\n\\u003e \\n\\u003e GeForge, too, uses novel hammering patterns and memory massaging to corrupt GPU page table mappings in GDDR6 memory to acquire read and write access to the GPU memory space. From there, it acquires the same privileges over host CPU memory. The GeForge proof-of-concept exploit against the RTX 3060 concludes by opening a root shell window that allows the attacker to issue commands that run unfettered privileges on the host machine. The researchers said that both GDDRHammer and GeForge could do the same thing against the RTC 6000.”,”published”:”2026-05-06T10:36:59″,”modified”:”2026-05-06T10:37:46″,”type”:”schneier”,”title”:”Rowhammer Attack Against NVIDIA Chips”,”source”:””,”references”:””,”id”:”SCHNEIER:30A97B929A2D355CD655DA26E6FAAD0D”,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.schneier.com\/blog\/archives\/2026\/05\/rowhammer-attack-against-nvidia-chips.html”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2026-05-06T12:05:10″,”description”:”A new rowhammer attack gives complete control of NVIDIA CPUs.\\n\\n\\u003e On Thursday, two research teams, working independently of each other, demonstrated attacks against two cards…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,13,33,114,7,11,5],"class_list":["post-51680","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-news","tag-none","tag-schneier","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n