NVIDIA Windows GPU Display Driver (nvlddmkm.sys): A kernel object created by the escape handler gets default

Impact

A kernel object created by the escape handler gets default permissions that expose it to accounts that should not reach it. Local privilege boundary erosion inside the driver.

Who can reach it

Any local user on the host who can open the over-permissive object.

What to do

Install the fixed Windows GPU Display Driver branch listed in the NVIDIA bulletin. nvlddmkm.sys is a kernel driver: the swap needs a host reboot, so on a Windows GPU node this is a drain-and-reboot, not a live driver reload. No VBIOS or BMC flash involved.

References