GPU VulnDB

Database/NVIDIA / GPU stack

NVIDIA Windows GPU Display Driver, DirectX 11 user-mode driver (nvwgf2um.dll): A crafted shader causes an out-of-bounds

CVE-2020-5965NVIDIA / GPU stackcurated

Impact

A crafted shader causes an out-of-bounds access in the DX11 user-mode driver and kills the rendering process. Anywhere tenants supply shaders - VDI, cloud gaming, remote rendering - a tenant can knock over their own and neighbouring sessions.

Who can reach it

Anyone who can submit a shader to the host, including from inside a guest VM or a remote session.

What to do

Install the fixed Windows GPU Display Driver branch listed in the NVIDIA bulletin. nvlddmkm.sys is a kernel driver: the swap needs a host reboot, so on a Windows GPU node this is a drain-and-reboot, not a live driver reload. No VBIOS or BMC flash involved.

References

https://nvd.nist.gov/vuln/detail/CVE-2020-5965

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.