st1nger :unverified: 🏴☠️ :linux: :freebsd:<p><a href="https://infosec.exchange/tags/GPUHammer" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GPUHammer</span></a> is the first attack to show <a href="https://infosec.exchange/tags/Rowhammer" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Rowhammer</span></a> bit flips on <a href="https://infosec.exchange/tags/GPU" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GPU</span></a> memories, specifically on a GDDR6 memory in an <a href="https://infosec.exchange/tags/NVIDIA" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>NVIDIA</span></a> A6000 GPU. Our attacks induce bit flips across all tested DRAM banks, despite in-DRAM defenses like TRR, using user-level <a href="https://infosec.exchange/tags/CUDA" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CUDA</span></a> <a href="https://infosec.exchange/tags/code" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>code</span></a>. These bit flips allow a malicious GPU user to tamper with another user’s data on the GPU in shared, time-sliced environments. In a proof-of-concept, we use these bit flips to tamper with a victim’s DNN models and degrade model accuracy from 80% to 0.1%, using a single bit flip. Enabling Error Correction Codes (ECC) can mitigate this risk, but ECC can introduce up to a 10% slowdown for <a href="https://infosec.exchange/tags/ML" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ML</span></a> <a href="https://infosec.exchange/tags/inference" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>inference</span></a> workloads on an <a href="https://infosec.exchange/tags/A6000" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>A6000</span></a> GPU.</p><p><a href="https://gpuhammer.com/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">gpuhammer.com/</span><span class="invisible"></span></a></p>