New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips

Researchers have uncovered several RowHammer attacks affecting high-performance GPUs that could be leveraged to escalate privileges or fully control a host system. These attacks, named GPUBreach, GDDRHammer, and GeForge, represent a significant advancement in exploiting GPU vulnerabilities.

What happened

New academic research has identified multiple RowHammer attacks that exploit vulnerabilities in the memory of high-performance graphics processing units (GPUs). These attacks, known as GPUBreach, GDDRHammer, and GeForge, can be used to escalate privileges or potentially gain full control over the host system hosting the GPU.

Why it matters

The research demonstrates that GPUs, commonly trusted as isolated processors, can be targeted to execute powerful RowHammer attacks that affect overall system security. GPUBreach notably extends previous techniques by enabling full CPU privilege escalation via manipulation of GDDR6 memory, highlighting a new attack vector in hardware security.

Key technical details

The attacks utilize RowHammer techniques to induce bit-flips in GDDR6 memory on GPUs. GPUBreach specifically shows that such bit-flips can be exploited to escalate privileges on the CPU, going beyond earlier GPU-related RowHammer methods like GPUHammer. This marks the first demonstration of full host control through GPU memory manipulation.

Affected organizations/products

High-performance graphics processing units (GPUs) using GDDR6 memory are the primary focus of this research. No specific commercial products or organizations have been mentioned as affected.

Source attribution

https://thehackernews.com/2026/04/new-gpubreach-attack-enables-full-cpu.html