NVIDIA GPU Display Driver, inter-process communication APIs: Improper access control on the driver's IPC surface gives

Impact

Improper access control on the driver's IPC surface gives a local attacker code execution, a crash, or a read of data crossing that IPC. This one also shipped as an Ubuntu security update, so Linux compute nodes are in scope, not just Windows workstations.

Who can reach it

Any local user or container on the host that can reach the driver's IPC endpoints.

What to do

Install the fixed GPU Display Driver branch on both Windows and Linux nodes. The kernel component (nvlddmkm.sys / nvidia.ko) cannot be hot-swapped under load, so this is a node drain and reboot per host; restart the container runtime afterwards so mounted driver libraries match the kernel module. No VBIOS or BMC flash.

References