CyberSIXT Search
Original
Image: Security Affairs

Security AffairsPierluigi Paganini

GPUBreach exploit uses GPU bit flips to gain root shell

GPUBreach is described as an attack technique that uses GPU memory bit-flips to escalate privileges and potentially take full control of a system. The approach targets GPU page tables in memory, using bit flips to gain arbitrary GPU memory read/write and then escalate to CPU-level privileges, potentially yielding a root shell. The researchers claim this can occur even when IOMMU is enabled, enabling system-wide compromise without disabling key protections.

The technique relies on GPU Rowhammer-like faults in GDDR6 memory and demonstrates data leakage and manipulation of machine learning weights, as well as leakage of cryptographic keys. ECC is discussed as a mitigating measure, though it is noted not to be a foolproof defence against GPUBreach, particularly on consumer GPUs where ECC is unavailable. According to gpuhammer[.]com, the combined effect is a more potent threat than prior GPU hammering methods, with the potential for full system takeover.

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device