GPUThor Rowhammer attack bypasses ECC on NVIDIA RTX A6000 to achieve root privilege escalation

Researchers have identified a new Rowhammer-based vulnerability, GPUThor, which exploits multi-bit memory errors to corrupt GPU page tables on NVIDIA RTX A6000 hardware. The attack bypasses Error Correction Code (ECC) protections and allows an unprivileged CUDA kernel to escalate privileges to root on the host system. The practical exploitability of this vulnerability in production environments remains to be assessed.