April 3, 2026
Flippin' bits, flippin' out
New Rowhammer attacks give complete control of machines running Nvidia GPUs
Gamers shrug, cloud admins panic—“flip the BIOS switch”
TLDR: Researchers showed a GPU memory trick that can let attackers take over PCs using certain Nvidia Ampere cards if a key BIOS guard is off, but turning on ECC or that BIOS setting blocks it. Comments split between “datacenter-only issue” and “audit your servers now,” with gamers largely unfazed.
The nerd fight is ON. Researchers just showed that by “hammering” memory on certain Nvidia cards, attackers can flip tiny bits from 0 to 1 and jump from the graphics card to the whole computer—full takeover if a key BIOS guard is off by default. Their new tricks, nicknamed GDDRHammer and GeForge, hit Ampere‑era cards and, according to the paper GDDRHammer, can spill from GPU memory into the CPU’s memory. Translation: if you share pricey GPUs in the cloud, this matters.
The top vibe in the comments? Split. One highly‑upvoted breakdown says only the RTX 3060 and RTX 6000 (Ampere generation) are known to be affected, and that turning on ECC (error-correcting memory) or the BIOS setting called IOMMU slams the door. That camp calls it a datacenter drama, not a gamer crisis. But the security crowd counters with: the scary part is that the “BIOS guard” is often off by default, exactly how real‑world breaches happen—and shared cloud GPUs are prime targets.
Meanwhile, the meme machine churned. Cue puns about “bit flips flipping breakfast,” confusion over GeForge vs. GeForce, and jokes that Rowhammer sounds like a CrossFit workout. Gamers are largely yawning—“doesn’t affect my rig”—while admins are making checklists. The real heat? Whether this is “turn on two settings and chill,” or a wake‑up call to audit every rack. Either way, expect BIOS switches to get flipped fast.
Key Points
- •Two independent teams demonstrated GPU-origin Rowhammer attacks (GDDRHammer, GeForge) on Nvidia Ampere GPUs that lead to full host compromise.
- •GDDRHammer targets the Nvidia RTX 6000 (Ampere), achieving an average of 129 bit flips per memory bank via novel patterns and memory massaging.
- •The attacks require IOMMU to be disabled, which the article notes is the default BIOS setting, enabling GPU-induced bit flips to affect CPU memory.
- •Previous GPU Rowhammer (GPUHammer) achieved only eight bit flips and limited effects; GDDRHammer represents a 64x increase and cross-component compromise.
- •The attack did not work on RTX 6000 models from Nvidia’s Ada generation due to newer GDDR that was not reverse-engineered by the researchers.