New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access

[XploitLK-Bot]

Researchers from the University of Toronto have published details on a new Rowhammer technique that targets NVIDIA workstation GPUs equipped with GDDR6 memory. The attack, named GPUThor, is notable because it successfully bypasses ECC, the very mitigation NVIDIA recommends for defending against GPU Rowhammer. This can lead to both denial-of-service (DoS) and privilege escalation, ultimately granting an attacker a root shell on the host system.

The attack works by hammering four DRAM rows simultaneously, a method that diverges from traditional Rowhammer patterns to overcome the hardware protections in place. The research team has confirmed that the exploit is effective against the NVIDIA RTX A6000 platform, highlighting a significant vulnerability in the memory subsystem of these high-end workstation cards.

Key takeaways from the disclosure are:

• Affected hardware: NVIDIA workstation GPUs with GDDR6 memory, with the attack successfully demonstrated on the RTX A6000.
• Impact: Memory corruption can be leveraged for system crashes (DoS) or to achieve host-level root access.
• Bypassed mitigation: Standard ECC mechanisms are ineffective against the GPUThor hammering pattern.

This discovery suggests that the safety margins provided by ECC on GPU memory may not be sufficient, posing a risk for environments relying on these cards for sensitive computations.

Source: The Hacker News

Are you currently running RTX A6000 or similar GDDR6 GPUs in your infrastructure, and how are you assessing your exposure to this type of memory corruption attack?