NVIDIA Windows GPU Display Driver (nvlddmkm.sys): The escape handler exposes functionality that should never

CVSS 5.5CVE-2018-6252NVIDIA / GPU stackcurated

Impact

The escape handler exposes functionality that should never have shipped to production callers; an unprivileged process can reach it and crash the display driver.

Who can reach it

Any local user on the host.

What to do

Install the fixed Windows GPU Display Driver branch listed in the NVIDIA bulletin. nvlddmkm.sys is a kernel driver: the swap needs a host reboot, so on a Windows GPU node this is a drain-and-reboot, not a live driver reload. No VBIOS or BMC flash involved.

References

https://nvd.nist.gov/vuln/detail/CVE-2018-6252

Related entries

NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Resource leak in the escape handlerCVE-2019-5671 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium
NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Out-of-bounds read in the DeviceIoControl handlerCVE-2019-5677 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium
NVIDIA Windows GPU Display Driver (nvlddmkm.sys): The escape handler relies on invariants that are not guaranteed, soCVE-2019-5686 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium
NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Uninitialised pointer use in nvlddmkm.sys. Local denial of serviceCVE-2019-5693 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium
NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Missing authorization check in the escape handlerCVE-2021-1054 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium
NVIDIA Windows GPU Display Driver (nvlddmkm.sys): NULL dereference in nvlddmkm.sys leading to a system crashCVE-2021-1078 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium

All NVIDIA / GPU stack entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.