Search papers, labs, and topics across Lattice.
WarpGuard introduces a novel protected-site control-flow integrity (CFI) system specifically designed for executed NVIDIA SASS binaries, addressing the critical security vulnerabilities associated with CUDA memory bugs that can lead to control-flow corruption. By enforcing checks at protected sites and authenticating control-flow states, WarpGuard successfully mitigates risks from backward-edge and forward-edge corruption attacks, demonstrating its effectiveness through extensive dynamic checks across 77 CUDA artifacts. The system not only provides robust security for CUDA applications but also ensures that violations fail closed, enhancing the reliability of GPU execution environments.
WarpGuard achieves auditable control-flow integrity for CUDA SASS binaries, effectively preventing exploitation from GPU memory bugs that can compromise execution integrity.
Recent CUDA exploitation work shows that GPU memory bugs can escalate into device-side control-flow corruption, as kernels later consume corrupted return continuations, function pointers, dispatch-table entries, or branch targets. For deployed CUDA binaries, the relevant security boundary is executed NVIDIA SASS, after PTX lowering, inlining, ABI decisions, register allocation, spills, predication, and SIMT execution; source- or PTX-level policies do not capture this boundary. We present WarpGuard, to our knowledge the first protected-site CFI system for CUDA device binaries operating on executed SASS. WarpGuard enforces at protected sites: recovered SASS instructions or sequences that consume control-flow state, provide sufficient binary evidence to derive policy, are checked before release, and fail closed on violation. It authenticates backward-edge continuation state for instrumented returns, validates recoverable forward targets per site, and reports fixed-edge, unsupported, profile-excluded, fallback, and no-surface outcomes outside the protected denominator. On 77 CUDA artifacts, WarpGuard classifies 51,621 SASS control-flow sites, including 1,343 returns and 154 supported forward target-set entries, and records 52.2 million dynamic checks. In representative backward- and forward-edge corruption attacks, native execution reaches attacker-selected behavior, detect-only mode records the expected violation, and enforcement fails closed before releasing the invalid protected transfer. Public-code evidence shows that the same SASS consumption patterns occur in real CUDA systems, including runtime dispatch tables, cuFFT callbacks, generated callable tables, and uploaded device-function pointers. WarpGuard delivers auditable protected-site CFI for CUDA SASS and separates dynamic-instrumentation enforcement from callback-free SASS timing and patch-cache feasibility.
