{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T07:02:06Z","timestamp":1782975726479,"version":"3.54.5"},"reference-count":67,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00228","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"546-564","source":"Crossref","is-referenced-by-count":0,"title":["GDDRHammer: Greatly Disturbing DRAM Rows \u2014 Cross-Component Rowhammer Attacks From Modern GPUs"],"prefix":"10.1109","author":[{"given":"Yichang","family":"Hu","sequence":"first","affiliation":[{"name":"UNC Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Noah","family":"Brown","sequence":"additional","affiliation":[{"name":"UNC Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuhang","family":"Chen","sequence":"additional","affiliation":[{"name":"UNC Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Joshua","family":"Bakita","sequence":"additional","affiliation":[{"name":"Mohamed bin Zayed University of Artificial Intelligence"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tianlong","family":"Chen","sequence":"additional","affiliation":[{"name":"UNC Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Daniel","family":"Genkin","sequence":"additional","affiliation":[{"name":"Georgia Tech"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andrew","family":"Kwong","sequence":"additional","affiliation":[{"name":"UNC Chapel Hill"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA.2014.6853210"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA45697.2020.00059"},{"key":"ref3","article-title":"Gpuhammer: rowhammer attacks on gpu memories are practical","volume-title":"Proceedings of the 34th USENIX Conference on Security Symposium, ser. SEC \u201925. USA: USENIX Association","author":"Lin"},{"key":"ref4","journal-title":"Graphics Double Data Rate (GDDR6) SGRAM Standard, Document JESD250D"},{"issue":"71","key":"ref5","first-page":"2","article-title":"Exploiting the dram rowhammer bug to gain kernel privileges","volume":"15","author":"Seaborn","year":"2015","journal-title":"Black Hat"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00090"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3466752.3480110"},{"key":"ref8","journal-title":"High Bandwidth Memory (HBM3) DRAM Standard, Document JESD238A"},{"key":"ref9","journal-title":"Low Power Double Data Rate 5 (LPDDR5) Standard, Document JESD209-5C.E"},{"key":"ref10","article-title":"Mcsee: evaluating advanced rowhammer attacks and defenses via automated dram traffic analysis","volume-title":"Proceedings of the 34th USENIX Conference on Security Symposium, ser. SEC \u201925. USA: USENIX Association","author":"Jattke"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SP63933.2026.00083"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00020"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00089"},{"key":"ref14","first-page":"5679","article-title":"{ECC. fail}: Mounting rowhammer attacks on {DDR4} servers with {ECC} memory","volume-title":"34th USENIX Security Symposium (USENIX Security 25)","author":"Kamadan"},{"key":"ref15","first-page":"1001","article-title":"SMASH: Synchronized many-sided rowhammer attacks from JavaScript","volume-title":"30th USENIX Security Symposium (USENIX Security 21). USENIX Association","author":"de Ridder"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833772"},{"key":"ref17","first-page":"1597","article-title":"SledgeHammer: Amplifying rowhammer via bank-level parallelism","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Kang"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00085"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2508148.2485928"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2019.2907248"},{"key":"ref21","article-title":"Nvidia\u00ae gpu memory error management","year":"2023","journal-title":"NVIDIA Corporation, Application Note DA-09826-002_v001"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833664"},{"key":"ref23","volume-title":"Pascal mmu format changes","year":"2025"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3576915.3616672"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/rtas61025.2024.00031"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978406"},{"key":"ref27","first-page":"19","article-title":"One bit flips, one cloud flops: Cross-VM row hammer attacks and privilege escalation","volume-title":"25th USENIX Security Symposium (USENIX Security 16)","author":"Xiao"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-40667-1_15"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-53140-2_29"},{"key":"ref30","first-page":"461","article-title":"Fundamentally understanding and solving rowhammer","volume-title":"in Proceedings of the 28th Asia and South Pacific Design Automation Conference, ser. ASPDAC \u201923","author":"Mutlu"},{"key":"ref31","first-page":"1615","article-title":"ZenHammer: Rowhammer attacks on AMD zen-based platforms","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Jattke"},{"key":"ref32","first-page":"213","article-title":"Throwhammer: Rowhammer attacks over the network and defenses","volume-title":"2018 USENIX Annual Technical Conference (USENIX ATC 18)","author":"Tatar"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00031"},{"key":"ref34","first-page":"5661","article-title":"Posthammer: Pervasive browser-based rowhammer attacks with postponed refresh commands","volume-title":"34th USENIX Security Symposium (USENIX Security 25)","author":"De Ridder"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00022"},{"key":"ref36","article-title":"Ecc.fail: mounting rowhammer attacks on ddr4 servers with ecc memory","volume-title":"Proceedings of the 34th USENIX Conference on Security Symposium, ser. SEC \u201925","author":"Kamadan"},{"key":"ref37","article-title":"Copy-on-flip: Hardening ecc memory against rowhammer attacks","author":"Di Dio","year":"2023","journal-title":"in NDSS"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.46586\/uasc.2025.001"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/3123939.3124538"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243831"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3453077"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48063.2020.00031"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3579371.3589080"},{"key":"ref44","first-page":"2101","article-title":"Invalidate+Compare: A Timer-Free GPU cache attack primitive","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Zhang"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/DSN-S58398.2023.00042"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3579371.3589102"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/ISOCC62682.2024.10762528"},{"key":"ref48","first-page":"623","article-title":"Harp: Practically and effectively identifying uncorrectable errors in memory chips that use on-die error-correcting codes","volume-title":"MICRO-54: 54th Annual IEEE\/ACM International Symposium on Microarchitecture, ser. MICRO \u201921","author":"Patel"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2025.3544964"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA53966.2022.00088"},{"key":"ref51","first-page":"385","article-title":"Twice: Preventing row-hammering by exploiting time window counters","volume-title":"2019 ACM\/IEEE 46th Annual International Symposium on Computer Architecture (ISCA)","author":"Lee"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/3566097.3568350"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-00470-5_3"},{"key":"ref54","first-page":"1579","article-title":"{ABACuS}:{All-Bank} activation counters for scalable and low overhead {RowHammer} mitigation","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Olgun"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO61859.2024.00071"},{"key":"ref56","first-page":"117","article-title":"Can\u2019t touch this: software-only mitigation against rowhammer attacks targeting kernel memory","volume-title":"Proceedings of the 26th USENIX Conference on Security Symposium, ser. SEC\u201917. USA: USENIX Association","author":"Brasser"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3458336.3465295"},{"key":"ref58","first-page":"697","article-title":"{ZebRAM}: Comprehensive and compatible software protection against rowhammer attacks","volume-title":"13th USENIX Symposium on Operating Systems Design and Implementation (OSDI 18)","author":"Konoth"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329827"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3600006.3613143"},{"key":"ref61","first-page":"399","article-title":"SoftTRR: Protect page tables against rowhammer attacks using software-only target row refresh","volume-title":"2022 USENIX Annual Technical Conference (USENIX ATC 22)","author":"Zhang"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3152701.3152709"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/3297858.3304039"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA51647.2021.00037"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO61859.2024.00072"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/3631882.3631886"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO50266.2020.00014"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573509.pdf?arnumber=11573509","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:36:02Z","timestamp":1782970562000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573509\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":67,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00228","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}