{"id":138938,"date":"2025-07-14T11:11:58","date_gmt":"2025-07-14T09:11:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu"},"modified":"2025-07-14T11:11:58","modified_gmt":"2025-07-14T09:11:59","slug":"gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","title":{"rendered":"GPUHammer \u2014 en variant af Rowhammer-angreb mod GPU-hukommelse","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Forskere fra University of Toronto har pr\u00e6senteret det f\u00f8rste Rowhammer-angreb, der anvendes til at forvride indholdet i videohukommelse. Muligheden for at udf\u00f8re et angreb, der kan f\u00f8re til substitution af op til 8 bit data, er demonstreret p\u00e5 NVIDIA A6000 diskrete GPU'er med GDDR6 videohukommelse. Som et praktisk eksempel vises, hvordan en s\u00e5dan forvridning kan bruges til at forstyrre udf\u00f8relsen af maskinl\u00e6ringsmodeller og betydeligt (fra 80% til 0,1%) reducere n\u00f8jagtigheden af de resultater, de leverer, ved at \u00e6ndre v\u00e6rdien af blot \u00e9t bit.

\"GPUHammer<\/center> <\/p>\n

Indtil nu har det v\u00e6ret vanskeligt at skabe Rowhammer-angreb for videohukommelse p\u00e5 grund af kompleksiteten ved at bestemme den fysiske layout af hukommelsen i GDDR-chips, de store adgangsfordelinger (4 gange langsommere) og den h\u00f8jere opdateringsfrekvens af hukommelsen. Desuden har unders\u00f8gelsen v\u00e6ret hindret af anvendelsen af propriet\u00e6re beskyttelsesmekanismer mod manipulation, der f\u00f8rer til for tidlig tab af ladning i GDDR-chips, hvilket kr\u00e6vede oprettelse af specielle hardware testops\u00e6tninger baseret p\u00e5 FPGA. <\/p>\n

For at studere videohukommelse har forskerne udviklet en ny teknik til reverse engineering af GDDR DRAM, og i selve angrebet benyttes metoder til optimering af adgang til hukommelse, der anvendes til at organisere parallelle beregninger, som blev brugt som intensitetsforst\u00e6rkere for adgangen til enkelte celler. To udm\u00f8ntninger af angrebet p\u00e5 NVIDIA GPU'en blev udf\u00f8rt ved brug af lavniveau CUDA-kode. <\/p>\n

I brugerens CUDA-kode udf\u00f8res der ikke anmodninger p\u00e5 fysiske hukommelsesadresser, men i NVIDIA-driveren blev den virtuelle hukommelse spejlet i den samme fysiske hukommelse, som forskerne udnyttede til at beregne forskydningen af den virtuelle hukommelse og bestemme banklayoutet af hukommelsen. Identificationen af adgange til de forskellige hukommels banker blev udf\u00f8rt gennem analyse af forsinkelser, som varierede ved adgang til en eller flere banker. <\/p>\n

I systemer, der bruger GPU i f\u00e6llesskab, s\u00e5som servere<\/a> For executing machine learning models, the attack allows one user to alter the video memory content containing data from another user. As a protective measure, NVIDIA recommends enabling Error Correction Codes (ECC) using the command «nvidia-smi -e 1» or utilizing graphics cards supported by OD-ECC (On-Die ECC) series, such as GeForce RTX 50, RTX PRO, GB200, B200, B100, H100, H200, H20, and GH200. <\/p>\n

According to researchers, enabling ECC on systems with the A6000 GPU leads to a performance reduction of about 10% in running machine learning models and a decrease in memory usage of 6.25%. The toolkit for conducting the attack and performing reverse engineering of the low-level video memory mapping on systems with NVIDIA GPUs has been published on GitHub. <\/p>\n

The RowHammer attack allows for the distortion of individual bits in DRAM memory by cyclically reading data from adjacent memory cells. Since DRAM memory comprises a two-dimensional array of cells, each made up of a capacitor and a transistor, continuous reading from the same memory area causes voltage fluctuations and anomalies that lead to minor charge loss in neighboring cells. If the reading intensity is high, the neighboring cell may lose a significant amount of charge, and the subsequent regeneration cycle will not be able to restore its original state, resulting in a change in the value stored in that memory cell. <\/p>\n

The Rowhammer attack method was proposed in 2014, after which a game of 'cat and mouse' began between security researchers and hardware manufacturers \u2014 memory chip producers attempted to block the vulnerability while researchers found new ways to circumvent it. For example, to protect against RowHammer, chip manufacturers added the TRR (Target Row Refresh) mechanism, but it turned out that it only blocks cell distortion in specific cases and does not protect against all possible attack variants. Attack methods have been developed for DDR3, DDR4, and DDR5 chips on systems with Intel, AMD, and ARM processors. Ways to circumvent ECC error correction have also been discovered, and options for launching attacks over the network and through executing JavaScript code in the browser have been proposed.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0422\u043e\u0440\u043e\u043d\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043a\u043b\u0430\u0441\u0441\u0430 Rowhammer, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u0443\u044e \u0434\u043b\u044f \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u0438. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0434\u043e 8 \u0431\u0438\u0442 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0434\u0438\u0441\u043a\u0440\u0435\u0442\u043d\u043e\u043c GPU NVIDIA A6000 \u0441 \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u044c\u044e GDDR6. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u043e \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0435 \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0432 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f \u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e (\u0441 80% \u0434\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":138939,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-138938","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GPUHammer \u2014 en variant af Rowhammer-angrebet rettet mod GPU-hukommelse | ProHoster","description":"Forskere fra Universitetet i Toronto pr\u00e6senterede det f\u00f8rste Rowhammer-angreb, der anvendes til at forvride indholdet af videohukommelsen.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GPUHammer \u2014 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a\u0438 Rowhammer \u043d\u0430 \u043f\u0430\u043c\u044f\u0442\u044c GPU | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0422\u043e\u0440\u043e\u043d\u0442\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u0435\u0440\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043a\u043b\u0430\u0441\u0441\u0430 Rowhammer, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u0443\u044e \u0434\u043b\u044f \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0432\u0438\u0434\u0435\u043e\u043f\u0430\u043c\u044f\u0442\u0438.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/gpuhammer-variant-ataki-rowhammer-na-pamyat-gpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-07-14T09:11:59+00:00","article:modified_time":"2025-07-14T09:11:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"138938","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:49:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:50:21","updated":"2026-02-09 17:49:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/138938","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=138938"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/138938\/revisions"}],"predecessor-version":[{"id":159226,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/138938\/revisions\/159226"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/138939"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=138938"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=138938"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=138938"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}