NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Same class as the other early-2018 escape bugs: an unprivileged
CVE-2018-6250NVIDIA / GPU stackcurated
Impact
Same class as the other early-2018 escape bugs: an unprivileged caller crashes the kernel driver, with escalation to SYSTEM not ruled out by the vendor.
Who can reach it
Any local user on the Windows host.
What to do
Install the fixed Windows GPU Display Driver branch listed in the NVIDIA bulletin. nvlddmkm.sys is a kernel driver: the swap needs a host reboot, so on a Windows GPU node this is a drain-and-reboot, not a live driver reload. No VBIOS or BMC flash involved.
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.