A new technical paper, “GPUBreach: Privilege Escalation Attacks via GPU Rowhammer,” was published by researchers at University of Toronto.
Summary
“GPUBreach shows that GPU Rowhammer attacks can move beyond data corruption to real privilege escalation. By corrupting GPU page tables, an unprivileged CUDA kernel can gain arbitrary GPU memory read/write, and then chain that capability into CPU-side escalation by exploiting newly discovered memory-safety bugs in the NVIDIA driver. The result is system-wide compromise up to a root shell, without disabling IOMMU, unlike contemporary works, making GPUBreach a more potent threat.”
Find the paper and summary here. April 2026.
Chris S. Lin and Yuqin Yan and Guozhen Ding and Joyce Qu and Joseph Zhu and David Lie and Gururaj Saileshwar,”GPUBreach: Privilege Escalation Attacks on GPUs using Rowhammer”, Proceedings of the 47th IEEE Symposium on Security and Privacy, 2026, SP ’26
Leave a Reply