Recent findings from two independent research teams have uncovered a significant vulnerability in NVIDIA's Ampere generation GPUs, demonstrating that Rowhammer attacks can exploit GDDR bitflips to gain complete control over CPU memory. This breakthrough highlights a critical security concern, as attackers can manipulate system memory to achieve total system compromise if the IOMMU memory management is disabled, which is typically the default setting in BIOS configurations. Andrew Kwong, a co-author of one of the studies, emphasized that the threat posed by Rowhammer, previously identified primarily in CPUs, is now equally serious for GPUs.
For businesses, this revelation underscores the importance of reviewing and updating security protocols related to GPU usage, particularly in environments where IOMMU settings may not be configured optimally. Organizations must prioritize implementing robust security measures to safeguard against such vulnerabilities, including regular firmware updates and monitoring for anomalous behavior. The implications for the cybersecurity landscape are significant, as the ability to exploit hardware vulnerabilities like Rowhammer could enable sophisticated attacks that compromise not only individual machines but potentially entire networks, necessitating a reevaluation of existing security frameworks and practices within organizations.
---
*Originally reported by [Schneier on Security](https://www.schneier.com/blog/archives/2026/05/rowhammer-attack-against-nvidia-chips.html)*