The cost of high-performance graphics processing units (GPUs) often means they're shared among multiple users in cloud environments. This setup has now opened up new vulnerabilities with the emergence of novel Rowhammer attacks targeting Nvidia GPUs.
These attacks exploit memory hardware’s susceptibility to bit flips, where 0s and 1s switch places due to repeated access or 'hammering' of DRAM (Dynamic Random Access Memory) rows. Previous research in 2014 showed how this could escalate an unprivileged user's privileges to root, but the latest attacks demonstrate their use on high-performance Nvidia GPUs for the first time.
Researchers have now expanded Rowhammer's reach far beyond CPUs, targeting a wider range of DRAM types including newer generations with error correcting code (ECC) protections. They’ve developed new hammering techniques like Rowhammer feng shui and RowPress to pinpoint sensitive data in extremely small memory regions. These attacks can even compromise devices over local networks or steal encryption keys.
The implications are significant, especially given the cost and critical role of these GPUs in cloud computing environments. It emphasizes that no technology is truly immune from security threats, and constant vigilance is necessary to protect sensitive data and systems.







