Back Securityaffairs.Co

GPUBreach exploit uses GPU memory bit

Securityaffairs.Co •Pierluigi Paganini • April 7, 2026

GPUBreach attack technique uses GPU memory bit-flips to escalate privileges and potentially take full control of a system. New research shows that attacks like GPUBreach exploit RowHammer bit-flips in GPU memory (GDDR6) to go beyond data corruption. Attackers can use this technique to escalate privileges and, in some cases, gain full control of the system. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

GPUBreach: New GPU Rowhammer Attack Enables Full System Compromise Researchers from the University of Toronto have unveiled a new attack named GPUBreach that exploits Rowhammer vulnerabilities in Nvidia's GDDR6 memory. This attack allows privilege escalation from an unprivileged CUDA kernel to root access on the host system without needing to disable the Input-Output Memory Management Unit (IOMMU). By corrupting GPU page tables, attackers can gain arbitrary read/write access to GPU memory and subsequently exploit memory-safety bugs in the Nvidia driver to achieve full system compromise. The attack can manipulate sensitive data, including cryptographic keys and machine learning model weights, significantly impacting AI workloads. The findings will be presented at the IEEE Symposium on Security & Privacy on April 13, 2026. Nvidia has acknowledged the issue and may update its security advisory, while Google awarded the researchers a $600 bug bounty for their discovery. Despite the severity, the current risk level is considered manageable by some industry players. 11 sources 67

Extracted Entities

GPUBreach exploit uses GPU memory bit

The full story

Extracted Entities

MITRE ATT&CK (1)

Platforms (1)

Vulnerabilities (1)