GPUBreach Attack Could Lead to Full System Takeover and Root Shell Access

GPUBreach is a newly disclosed GPU Rowhammer-based vulnerability that flips GPU page-table entries in GDDR6 to give unprivileged CUDA kernels arbitrary GPU memory read/write, then leverages corrupted driver-owned metadata to trigger CPU-side out-of-bounds writes and obtain a full OS root shell even with the IOMMU enabled; researchers validated the technique on an NVIDIA RTX A6000 and demonstrated impacts including extraction of cryptographic keys, theft of LLM weights, and deliberate degradation of AI model accuracy.