GPUBreach: First GPU Rowhammer Attack Achieves Root Shell via GDDR6 Bit-Flips, Bypasses IOMMU

arXiv·high signal

Researchers demonstrated GPUBreach, a privilege escalation attack where an unprivileged CUDA kernel corrupts GPU page tables via GDDR6 Rowhammer, gains arbitrary GPU memory read/write, then chains into CPU-side root shell by exploiting NVIDIA driver memory-safety bugs — all without disabling IOMMU protections previously assumed to mitigate GPU-origin attacks. Two concurrent works (GDDRHammer, GeForge) confirm the attack surface. All three appear at IEEE S&P 2026. NVIDIA was disclosed Nov 2025; Google awarded a bug bounty.