Home / Technology / GPU Rowhammer: Root Access Achieved
GPU Rowhammer: Root Access Achieved
2 Apr
Summary
- New attacks grant root control of host machines via Nvidia GPUs.
- Rowhammer exploits allow manipulation of GPU memory to access CPU memory.
- Disabling IOMMU in BIOS or enabling ECC on GPUs can mitigate risks.
Recent research has unveiled critical vulnerabilities in high-performance Nvidia GPUs, allowing for complete host machine compromise. Two independent security teams demonstrated novel Rowhammer attacks that exploit memory hardware's susceptibility to bit flips, enabling malicious users to gain full root control.
These attacks, named GDDRHammer and GeForge, target Nvidia's Ampere generation GPUs, specifically the RTX 3060 and RTX 6000. By manipulating GPU page tables and memory, attackers can achieve arbitrary read/write access to the GPU's memory, and critically, redirect this access to the host CPU's memory.
This sophisticated technique bypasses existing CPU-focused Rowhammer mitigations. Experts recommend disabling IOMMU in BIOS settings or enabling Error Correcting Codes (ECC) on the GPUs to counter these threats, though both options may introduce performance overhead.
The research highlights that while these attacks are not yet known to be used in the wild, the potential for serious security breaches on shared cloud environments is significant. GPU manufacturers and users are urged to be aware of these evolving threats.
