Phoenix (CVE-2025-6202): New Rowhammer Variant Bypasses DDR5 Protections
2 sources · Updated 4mo ago · First seen Sep 18, 2025
Researchers from Google and ETH Zurich have discovered a new Rowhammer attack, dubbed Phoenix, that can compromise DDR5 memory modules from SK Hynix. The attack bypasses existing DDR5 protections and has been assigned CVE-2025-6202 with a CVSS score of 7.1. Responsible disclosure was made to affected vendors, and AMD has released a BIOS update to mitigate the risk.
Do you run this?See affected versions and whether adversaries are exploiting it against assets like yours.
Check your exposure
