RowPress Vulnerability in Modern DRAM Chips

TL;DR

This paper introduces RowPress, a new DRAM vulnerability caused by long-open row states, demonstrating its widespread presence in off-the-shelf DDR4 chips and proposing mitigation strategies.

Contribution

It identifies and characterizes RowPress as a novel DRAM vulnerability distinct from RowHammer, with experimental validation and mitigation solutions.

Findings

RowPress causes widespread bitflips in DDR4 DRAM.

Existing RowHammer protections do not prevent RowPress.

Effective mitigation techniques are proposed for both vulnerabilities.

Abstract

Memory isolation is a critical property for system reliability, security, and safety. We demonstrate RowPress, a DRAM read disturbance phenomenon different from the well-known RowHammer. RowPress induces bitflips by keeping a DRAM row open for a long period of time instead of repeatedly opening and closing the row. We experimentally characterize RowPress bitflips, showing their widespread existence in commodity off-the-shelf DDR4 DRAM chips. We demonstrate RowPress bitflips in a real system that already has RowHammer protection, and propose effective mitigation techniques that protect DRAM against both RowHammer and RowPress.