GPUBreach: University of Toronto Researchers Achieve Root Shell via GDDR6 Rowhammer Attack
Researchers from the University of Toronto have demonstrated GPUBreach — a Rowhammer style attack on GDDR6 GPU memory that corrupts GPU page tables, enabling a…
Published on MyPrivateClaw
Apr 8, 2026, 9:25 AM UTC
Coverage date
Apr 6, 2026
Last updated
Apr 8, 2026, 9:25 AM UTC
News summary
Rowhammer Comes to the GPU — With Consequences for AI Workloads Researchers at the University of Toronto have published GPUBreach, a new attack that extends the Rowhammer technique from traditional CPU DRAM to GDDR6 GPU memory — and demonstrates that the resulting bit flips can be weaponized for full CPU side privilege escalation, achieving root shell access on the target system. The research, presented at IEEE S&P 2026, builds on the team's earlier GPUHammer work, which showed that Rowhammer style bit flips could degrade the accuracy of deep neural network models running on Nvidia GPUs. GPUBreach goes significantly further: by inducing GDDR6 bit flips that corrupt GPU page tables, attackers can gain arbitrary read write access to GPU memory, and by combining this with newly discovered memory safety bugs in Nvidia drivers, achieve full CPU side privilege escalation. Attack Requirements…