NVIDIA Highlights Potential Vulnerability of High-End GPUs to Rowhammer Attacks Without ECC

NVIDIA has issued a security warning regarding a potential vulnerability in its high-end GPUs to Rowhammer attacks, a type of exploit that has traditionally targeted regular DRAM. Researchers at the University of Toronto demonstrated that GDDR6 memory, used in NVIDIA’s A6000 GPUs, could be susceptible to this kind of attack if error correction code (ECC) is not enabled. When ECC is disabled, repeated memory access could cause bits to flip in neighboring memory rows, potentially leading to data corruption or even system compromise. The issue was discovered when researchers disabled ECC, which allowed the Rowhammer attack to succeed. However, enabling ECC provided a straightforward defense, rendering the attack ineffective. NVIDIA has reminded users that protections against this vulnerability are already built into their systems, but only if users activate the appropriate settings. For many GPUs, such as the A6000, ECC is a crucial safeguard, and users are encouraged to ensure it’s activated. Newer memory types, like GDDR7 and HBM3, feature on-die ECC, which provides automatic protection without user intervention. For enterprise setups or managed systems, NVIDIA recommends verifying ECC status using tools like nvidia-smi or Redfish APIs. This issue serves as a reminder of the importance of securing hardware with proper memory protections.