GDDR6 Rowhammer attacks on NVIDIA GPUs can open a root shell
Rowhammer is not new. The original DRAM issue was disclosed in 2014, but new research shows the same class of attack can now be repurposed for modern GPUs. The official gddr.fail (yes, that’s the actual domain for disclosure) and Ars Technica say the new GDDRHammer and GeForge attacks use GPU memory bit flips to break isolation and reach host CPU memory.
How the exploit works
The attacker keeps hitting the same GDDR6 memory rows until nearby bits flip. Those flips can corrupt GPU page tables, which are the maps that tell the GPU what memory it is allowed to access. Once those mappings are damaged, the GPU can be redirected into CPU memory, which is why both teams describe the end result as full machine compromise.
The research papers include these two graphics, which I found to be the clearest visual explanations.
Source: GDDR6.fail
Which GPUs are actually affected?
Ars says the public attacks were demonstrated on the GeForce RTX 3060 and an Ampere workstation GPU, while NVIDIA’s earlier security notice explicitly referenced the RTX A6000 with GDDR6 memory. The GDDRHammer paper also says nearly all tested RTX A6000 cards remained vulnerable under realistic settings.
Source: GDDR6.fail
In the limitations excerpt shared above, the researchers say they also tested RTX 3080, RTX 4060, RTX 4060 Ti, and RTX 5050 samples and did not observe bit flips on those cards. The public GDDRHammer paper also says it found no induced bit flips on tested Ada RTX 6000 GPUs and suggests GDDR6X uses stronger mitigation than GDDR6. NVIDIA separately says GDDR7 devices, including GeForce RTX 50 series, implement on-die ECC that indirectly helps protect against Rowhammer, so RTX 50 cards are not confirmed as affected by these papers.
Users who are worried can enable ECC from the command line, as both the official gddr.fail FAQ and NVIDIA point to it as a mitigation. I still would not treat it as a go-to fix for gaming PCs, because it reduces usable memory and comes with a performance cost.
Source: gddr6.fail , Ars Technika
