The Register: Ruh-roh. DDR5 memory vulnerable to new Rowhammer attack

Sep 17, 2025

—

Source URL: https://www.theregister.com/2025/09/17/ddr5_dram_rowhammer/
Source: The Register
Title: Ruh-roh. DDR5 memory vulnerable to new Rowhammer attack

Feedly Summary: Google and ETH Zurich found problems with AMD/SK Hynix combo, will probe other hardware
Researchers from Google and Swiss university ETH Zurich have found a new class of Rowhammer vulnerability that could allow attackers to access info stored in DDR5 memory.…

AI Summary and Description: Yes

Summary: The text discusses a newly discovered Rowhammer vulnerability in DDR5 memory, identified by researchers from Google and ETH Zurich. This finding is significant as it highlights potential security risks associated with hardware, specifically impacting memory integrity and accessibility in modern computing infrastructures.

Detailed Description: The discovery of a Rowhammer vulnerability represents a critical challenge in hardware security, particularly within the context of cloud computing and data integrity. Rowhammer attacks can cause bit flips in memory, leading to unauthorized access to sensitive information. Here are the major points highlighted by the finding:

– **Rowhammer Vulnerability**: A new variant has been identified that specifically affects DDR5 memory components.
– **Investigations by Reputable Institutions**: Conducted by Google and ETH Zurich, emphasizing the credibility and importance of the research findings.
– **Potential Impact**: This vulnerability could allow attackers to manipulate or access sensitive data stored in memory, raising significant concerns for organizations relying on modern hardware infrastructures.
– **Future Probes**: There is an indication that further investigations will explore other hardware combinations, suggesting that this issue may not be limited to just AMD/SK Hynix but could extend to additional manufacturers.
– **Implications for Security Professionals**: The findings bring to light the necessity for security professionals to reassess hardware vulnerabilities, implement stricter security measures, and ensure that mitigating controls are in place to guard against such exploits.

As the landscape of hardware security evolves, this discovery serves as a reminder of the ongoing challenges faced by security analysts and infrastructure engineers in safeguarding sensitive data.

1 2 2025 5 7 a access accessibility Act AI All allow AMD and Arch Aria art as at ated attack attacker attackers attacks Bi by C CERN challenge challenges CI CIA class Cloud cloud computing co Computing computing infrastructure concerns Context control controls critical D data data integrity de e end Engineer engineers exp exploit exploits face fact for future g GIS Go Google gs H hardware hardware co hardware infrastructure hardware security hardware vulnerabilities high Highlight http HTTPS Hynix impact implications implications for security in information infrastructure infrastructures institutions integrity investigation investigations io issue ite J Just k l land leading led Li low M man manufacturers measures memory memory components memory integrity Mode Modern N nation new NGO Nix no o of on one ons organization organizations ory other over point potential pre pro problem professionals ps R raising RCE re red research researchers Risk risks Ro row Rowhammer Rowhammer attack Rowhammer Attacks Rowhammer vulnerability s safe search sec security security analysts security measure security measures security professionals security risk security risks sensitive data sensitive information Sig SoC source specific SSE SSO STIG stored structures T ted text the to Tor TP unauthorized access US use uth V vulnerabilities vulnerability Ware Wi x z Zurich