NVIDIA GPU driver / GRID vGPU and vSGA - host memory mapping path: The host memory mapping path did not restrict access
Impact
The host memory mapping path did not restrict access to third-party device I/O memory, giving a guest privilege escalation on the host. Scored 10.0. Included here despite its age because it is the archetype of the vGPU escape class and because GRID/vSGA stacks this old are still found running in long-lived VDI estates that were never in anyone's patch programme.
Who can reach it
A guest on a GRID vGPU or vSGA host. The mapping path is reachable from the guest driver.
What to do
Upgrade the host driver to R346 346.87 / R352 352.41 (Linux) or R352 352.46 (GRID vGPU and vSGA) or, realistically, to a supported branch - anything on these versions is a decade out of support. Cost: full hypervisor host drain. If you find this in your estate the finding is not the CVE, it is that you have an unmanaged vGPU host.
References
Related entries
- NVIDIA Windows GPU Display Driver, DirectX driver (shader compiler/runtime): A crafted shader reads out of bounds on anCVE-2019-5684 · NVIDIA Windows GPU Display Driver, DirectX driver (shader compiler/runtime)Critical
- DGX A100 BMC: Full BMC compromise (heap buffer overflow) — worst-case out-of-band takeoverCVE-2023-31029 · DGX A100 BMCCritical
- Univa Grid Engine (execd spooling with Docker jobs on root_squash): In the specific combination of Docker-based jobsCVE-2018-20871 · Univa Grid Engine (execd spooling with Docker jobs on root_squash)Critical
- NVIDIA Windows GPU Display Driver, DirectX driver (shader compiler/runtime): A crafted shader overruns a shader-localCVE-2019-5685 · NVIDIA Windows GPU Display Driver, DirectX driver (shader compiler/runtime)Critical
- RISC-V ISA (MTVEC register) as used in NVIDIA GPU microcontrollers: A documented ambiguity in the RISC-V specificationCVE-2021-1104 · RISC-V ISA (MTVEC register) as used in NVIDIA GPU microcontrollersCritical
- DGX A100 BMC: unauthenticated stack overflow in the host KVM daemon leads to RCECVE-2023-31024 · DGX A100 BMCCritical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.