Nvidia GPUs security flaw - /pol/ (#510242619) [Archived: 470 hours ago]

Anonymous ID: S8beyyLMFinland
7/13/2025, 8:08:19 AM No.510242619
35f81d2aef2e2f693ed79e5ebf4cc696895f6aaaf63a4a8914c77ae244fc910b
If you own Nvidia GPU published in 2023-2025 they have a security flaw

It can be attached through internet (unless you disconnect an internet) and then a malicious program is running using your GPU as its source of power

https://nvidia.custhelp.com/app/answers/detail/a_id/5671/~/security-notice%3A-rowhammer---july-2025

NVIDIA just put out a new security notice, and if you're running one of its powerful GPUs, you might want to pay attention. Researchers from the University of Toronto have shown that Rowhammer attacks, which are already known to affect regular DRAM, can now target GDDR6 memory on NVIDIA's high-end GPUs.

Rowhammer has been around for years but originally targeted CPU + RAM. It's one of those weird memory bugs where repeatedly accessing one row in RAM can cause bits to flip in another row. Until now, this was mostly a CPU memory problem. Then an attacker discovered how to use Nvidias programs to access GPU (just like AI uses GPU for its calculations) and Graphics RAM for Rowhammer.

NVIDIA is not sounding an alarm so much as reminding everyone that protections are already in place,

>but only if you're using the hardware properly.

NVIDIA suggests using tools like nvidia-smi or, if you're in a managed enterprise setup, working with your system's BMC or Redfish APIs to verify settings. Nvidia software now produces a warning if it deems you vulnerable.
Replies: >>510243920 >>510243927 >>510244217 >>510244524 >>510246888
Anonymous ID: VpXIANktUnited States
7/13/2025, 8:09:12 AM No.510242670
glad I was always too broke for nvidia
Anonymous ID: tT0/zY0P
7/13/2025, 8:34:07 AM No.510243920
>>510242619 (OP)
>have a security flaw
they are all designed that way, think of it as an NSA feature
Anonymous ID: /Z0mxclG
7/13/2025, 8:34:16 AM No.510243927
russia_friends
russia_friends
md5: 24e98310e0259a5fb7cf3330d32a83df🔍
>>510242619 (OP)
Aren't you supposed to be posting news from your Finnish site?
Anonymous ID: zvyjxo3sCanada
7/13/2025, 8:40:05 AM No.510244217
>>510242619 (OP)
Semi randomly flipping a bit doesn't seem like a way to do anything but crash a program.
Anonymous ID: 7pLOIrLcUnited Arab Emirates
7/13/2025, 8:46:07 AM No.510244524
>>510242619 (OP)
I'm a cybersecurity expert. Your average leetzor has no clue what is a rowhammer attack, or even the math behind it. Unless you're a glowie, or a high-ranking member of an international criminal enterprise then you really don't have to worry, and if you're one then you will probably be using a MacBook not GlowieOS aka Windows
Replies: >>510246620
Anonymous ID: qdlywACmUnited Kingdom
7/13/2025, 9:33:49 AM No.510246620
1730684210081191
1730684210081191
md5: 6722b7d5f8f05528017c174c24baae8f🔍
Effect is nothing on Qubes OS, inferencing ephemerally.

>>510244524
>if you're one then you will probably be using a MacBook
You are a laughing stock.
Anonymous ID: gF6gzgWwFinland
7/13/2025, 9:41:01 AM No.510246888
>>510242619 (OP)
>It can be attached through internet (unless you disconnect an internet) and then a malicious program is running using your GPU as its source of power
keeeeek what the fuck are you talking about you clearly just read a bulletin and made shit up
if you are able to corrupt some memory that you shouldnt which isnt even properly controllable nothing like that can be done, you absolute retard

its like the heartbleed etc vulnerabilities all over again when fucking retards were posting completely made up shit about it and some of it even end up in newspapers, as if it was anything that a home computer user should be worried about

as in it was only meaningful to someone running multiple virtual machines on a same computer like some cloud provider and even in those cases the whole attack vector was very theoretical
this one is even less impactful
Replies: >>510247222
Anonymous ID: gF6gzgWwFinland
7/13/2025, 9:49:11 AM No.510247222
>>510246888
what is happening in these things is some people find some extremely theoretical vulnerability and then because they want fame for themselves for career or whatever purposes, they give it a snazzy name and completely overblow its impact to the point of almost being lying

>heartbleed
brainfart here, i misremembered the name that one was a real vulnerability in SOFTWARE, what i meant to say is Meltdown, Spectre etc extremely theoretical hardware level exploit

in fact heartbleed is an example of the bugs that people should actually worry about, that is SOFTWARE bugs, as this is how glowies or just regular ol thieves exploit your computer
not heartbleed specifically as it was more of an server-side problem
but vulnerabilities like what was being used during the cryptolocker outbreaks after the NSA tools leaked
jeetcode in windows itself or the browsers you use that allow a hole to your system, those are the problems
not some extremely theoretical hardware bug