Two new attacks, GDDRHammer and GeForge, demonstrate how malicious actors can gain complete root control of machines running Nvidia's Ampere-generation GPUs like the RTX 6000. These attacks exploit GDDR6 memory vulnerabilities to induce bit flips, bypassing existing CPU Rowhammer mitigations. The attacks work because IOMMU memory management is often disabled by default in BIOS settings.

GDDRHammer achieved 129 bitflips per bank, a massive increase over previous GPUHammer, and manipulated GPU page tables to compromise CPU memory. GeForge induced 1,171 bitflips on the RTX 3060, similarly forging page tables to access host physical memory. Both attacks allow arbitrary read/write access to GPU memory, enabling user-to-root escalation.

Nvidia stated users should consult their published guidance on mitigation.