#rowhammer

A new Rowhammer method called Phoenix bypasses DDR5 mitigations, flips memory bits, and achieves privilege escalation in just minutes, exposing widespread vulnerability in SK Hynix modules.

Source: Computer Security Group, ETH Zurich | Paper

(via There’s a new way to flip bits in DRAM, and it works against the latest defenses | Ars Technica)

Researchers from Google and ETH Zurich built an attack named Phoenix that tracks and self-corrects refresh timing to outmanoeuvre DDR5 in-DRAM TRR, triggering bit flips and demonstrating a root exploit on a stock DDR5 desktop.

Source: Google | ETH Zurich (phoenix paper)

Hackers can now flip bits in NVIDIA A6000 GPU memory using a Rowhammer-style attack called GPUHammer, sabotaging deep learning models with a single hit. The University of Toronto's research shows how even advanced GPU memory is vulnerable.

Source: GPUHammer

A study from the University of Toronto has revealed that modern graphics processing units (GPUs) are susceptible to Rowhammer-style memory attacks, challenging long-held assumptions about the security of GPU memory. The attack, named GPUHammer, represents the first practical demonstration of a Rowhammer exploit targeting high-performance, discrete GPUs, specifically those utilizing GDDR6…

No todas las amenazas provienen de software malicioso, virus o troyanos. A veces, los ataques más peligrosos se esconden en vulnerabilidades que afectan el hardware de nuestras computadoras. Uno de los ataques más inquietantes y técnicamente fascinantes de los últimos años es el exploit Rowhammer, una técnica que aprovecha una falla en la memoria RAM para corromper datos y obtener acceso a áreas…

New Rowhammer Vulnerability Exploits Increasingly Smaller DRAM Chips

Google researchers have recently revealed a new Rowhammer technique that expands threat actors’ reach on a target machine as DRAM chips become smaller. Dubbed Half-Double, this technique capitalizes on the worsening physics of some of the newer DRAM chips to alter the contents of memory. Rowhammer, which was first discovered back in 2014, is a vulnerability through which repeated access to one…