If you own Nvidia GPU published in 2023-2025 they have a security flaw
It can be attached through internet (unless you disconnect an internet) and then a malicious program is running using your GPU as its source of power
https://nvidia.custhelp.com/app/answers/detail/a_id/5671/~/security-notice%3A-rowhammer---july-2025
NVIDIA just put out a new security notice, and if you're running one of its powerful GPUs, you might want to pay attention. Researchers from the University of Toronto have shown that Rowhammer attacks, which are already known to affect regular DRAM, can now target GDDR6 memory on NVIDIA's high-end GPUs.
Rowhammer has been around for years but originally targeted CPU + RAM. It's one of those weird memory bugs where repeatedly accessing one row in RAM can cause bits to flip in another row. Until now, this was mostly a CPU memory problem. Then an attacker discovered how to use Nvidias programs to access GPU (just like AI uses GPU for its calculations) and Graphics RAM for Rowhammer.
NVIDIA is not sounding an alarm so much as reminding everyone that protections are already in place,
>but only if you're using the hardware properly.
NVIDIA suggests using tools like nvidia-smi or, if you're in a managed enterprise setup, working with your system's BMC or Redfish APIs to verify settings. Nvidia software now produces a warning if it deems you vulnerable.
