New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips

New research introduces GPUBreach, a RowHammer-based attack on NVIDIA GPUs using GDDR6 memory that achieves full CPU privilege escalation.

• •GPUBreach corrupts GPU page tables via GDDR6 bit-flips, granting an unprivileged process arbitrary GPU memory read/write access
• •The attack chains GPU compromise into full CPU privilege escalation by exploiting memory-safety bugs in the NVIDIA kernel driver, spawning a root shell
• •Unlike competing techniques (GeForge, GDDRHammer), GPUBreach works even with IOMMU enabled, bypassing its protections by corrupting trusted driver state within IOMMU-permitted buffers
• •Additional capabilities include leaking secret cryptographic keys from NVIDIA cuPQC and staging ML model accuracy degradation attacks
• •