New GDDRHammer and GeForge Attacks: Rowhammer on NVIDIA GPUs Forces Bit Flips to Gain Full System Memory Access

Tom's Hardware·high signal

Researchers demonstrate two new Rowhammer attacks (GDDRHammer and GeForge) that exploit GDDR6 memory on NVIDIA Ampere GPUs to achieve full host system compromise. The attack repeatedly hammers GPU memory rows until bit flips corrupt GPU page tables, redirecting GPU access into CPU memory. Confirmed vulnerable: RTX 3060 and RTX A6000. Newer GPUs (RTX 4060, 5050) appear unaffected; NVIDIA confirms Hopper and Blackwell include mitigations. Primary threat vector is cloud GPU environments. IOMMU and ECC offer partial defense.