GPUThor Rowhammer Attack Bypasses NVIDIA GPU Security in 2026 Breakthrough
In August 2026, University of Toronto researchers disclosed GPUThor, a sophisticated Rowhammer attack targeting NVIDIA workstation GPUs with GDDR6 memory that defeats error correction codes (ECC). The attack impacts RTX A6000, A5000, A4500, and A4000 models, enabling attackers to achieve denial-of-service conditions and privilege escalation to root access on host systems. GPUThor uses non-uniform hammering techniques to generate up to 377,000 bit flips per gigabyte, vastly exceeding previous GPU Rowhammer attacks and successfully bypassing NVIDIA's recommended ECC mitigation through multi-bit corruption exploitation. This hardware vulnerability represents a significant evolution in GPU-based attacks as organizations increasingly rely on shared GPU infrastructure for AI workloads and cloud computing. The attack highlights critical security gaps in hardware-level protections and the growing attack surface presented by specialized computing hardware in enterprise environments.
Kill Chain
