GoKawiilUniversity of Toronto researchers break NVIDIA GPU ECC defenses with GPUThor Rowhammer attack
Researchers demonstrated a new Rowhammer variant called GPUThor that defeats NVIDIA's ECC memory protections on Ampere-class workstation GPUs, including the RTX A4000, A4500, A5000, and A6000. By using a non-uniform hammering pattern tuned to avoid triggering GDDR6's Target Row Refresh defenses, the attack generates far more bit flips than earlier concepts like GPUHammer, enabling denial-of-service conditions and root-level privilege escalation.
GoKawiil's interpretation of the reporting above, not reported fact.
These GPUs are heavily used in AI training and cloud computing environments, meaning a successful attack could corrupt model data or grant attackers system-level control in shared infrastructure. The finding shows that ECC, long considered a reliable safeguard against Rowhammer-style memory attacks, can be circumvented with carefully engineered access patterns, raising fresh concerns for cloud providers and AI operators relying on these safeguards.
- GPUThor bypasses NVIDIA's ECC protections on Ampere-class GPUs like the RTX A4000-A6000.
- The attack exploits undocumented memory request coalescing and TRR activation behavior to avoid detection.
- It can enable both denial-of-service attacks and root-level privilege escalation on affected GPUs.
PNY NVIDIA RTX A4000 Workstation GPU — The RTX A4000 is one of the Ampere-class workstation cards named in the GPUThor research, and it's a mainstay for AI training, rendering and CAD workloads. Its single-slot design and ECC-capable GDDR6 memory make it an easy drop-in for compact workstations, and keeping firmware and drivers current is the practical response to research like this.
See PNY NVIDIA RTX A4000 Workstation GPU on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-08-26
Published there as: “New GPUThor attack defeats NVIDIA ECC protection for root access”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.