PAGE404: GPU memory isolation metadata side channels

Evidence record

GH200 MIG research distinguishes shared UVM access-counter covert channel from migration-driver timing, reporting test-specific throughput and workload-fingerprint metrics.

Read the original source ↗

Claim-level citations (3)

• supportsPAGE404 observes two distinct GH200 GPU isolation side channels: Timing a tenant's own page migrations through shared driver processing can correlate with another tenant's LLM workload; selected classifier and token-length results are metadata inference, not plaintext extraction.

  Driver timing channel and LLM workload inference experiments

• supportsPAGE404 observes two distinct GH200 GPU isolation side channels: Shared page-migration counters can carry a cooperative cross-MIG covert channel; the paper reports roughly 8.5 kbps for one set and 15.5 kbps for two sets under chosen conditions.

  Access-counter mapping and covert-channel throughput tests

• supportsPAGE404 observes two distinct GH200 GPU isolation side channels: The passive shared-driver timing channel succeeded in roughly half the paper's experimental runs, and its selected LLM classifier inferred workload class rather than extracting readable prompts or weights.

  Shared driver timing evaluation, reliability caveat and Table III LLM classifier