GPUBreach Rowhammer Hijacks GPUs for Full System Root

Researchers at the University of Toronto disclosed "GPUBreach", a GPU Rowhammer attack chain that corrupts GPU page tables to allow an unprivileged CUDA kernel arbitrary GPU memory read/write and escalate to a full system root shell by chaining to NVIDIA driver memory-safety bugs; the technique can bypass IOMMU protections, ECC is not a complete mitigation against multi-bit flips, and the researchers plan to publish reproduction code, posing significant risks to cloud and HPC multi-tenant GPU isolation.