Phoenix Rowhammer Attack Bypasses DDR5 Defenses

Researchers reported that Rowhammer remains a practical hardware security threat, with the newer Phoenix technique showing that DDR5 memory can still be manipulated despite built-in protections. The attack revives a flaw first highlighted by Google Project Zero, which demonstrated that repeatedly accessing DRAM rows could trigger adjacent bit flips and be weaponized for privilege escalation on x86 systems, including a Linux kernel exploit that altered page table entries and a sandbox escape from Google Native Client.

The newer findings indicate that DDR5 mitigations have not eliminated the underlying risk, extending concerns that began with widespread DDR3 exposure across tested laptop models. Earlier research had already shown Rowhammer was more than a reliability issue, and the latest reports suggest modern memory modules remain susceptible to carefully engineered disturbance attacks that can undermine isolation boundaries and system integrity, renewing pressure on hardware vendors to disclose affected products and strengthen defenses.