NVIDIA Windows GPU Display Driver, DirectX 11 user-mode driver (nvwgf2um.dll): A crafted shader causes an out-of-bounds

Impact

A crafted shader causes an out-of-bounds access in the DX11 user-mode driver and kills the rendering process. Anywhere tenants supply shaders - VDI, cloud gaming, remote rendering - a tenant can knock over their own and neighbouring sessions.

Who can reach it

Anyone who can submit a shader to the host, including from inside a guest VM or a remote session.

What to do

Install the fixed Windows GPU Display Driver branch listed in the NVIDIA bulletin. nvlddmkm.sys is a kernel driver: the swap needs a host reboot, so on a Windows GPU node this is a drain-and-reboot, not a live driver reload. No VBIOS or BMC flash involved.

References

Related entries

• NVIDIA Windows GPU Display Driver, DirectX 11 user-mode driver (nvwgf2um.dll): Crafted shader triggers an out-of-boundsCVE-2020-5981 · NVIDIA Windows GPU Display Driver, DirectX 11 user-mode driver (nvwgf2um.dll)High
• NVIDIA vGPU Manager (vGPU plugin): Guest-supplied size not validated in the vGPU pluginCVE-2020-5986 · NVIDIA vGPU Manager (vGPU plugin)Medium
• NVIDIA vGPU Manager (vGPU plugin): NULL dereference in the vGPU plugin reachable from a guest - one tenant crashes theCVE-2020-5989 · NVIDIA vGPU Manager (vGPU plugin)Medium
• NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko): Improper validation of a user-supplied pointerCVE-2021-1053 · NVIDIA GPU Display Driver (Windows nvlddmkm.sys + Linux nvidia.ko)Medium
• NVIDIA Windows GPU Display Driver (nvlddmkm.sys): Missing authorization check in the escape handlerCVE-2021-1054 · NVIDIA Windows GPU Display Driver (nvlddmkm.sys)Medium
• NVIDIA vGPU Manager (vGPU plugin): Unvalidated guest input causes unbounded resource consumption on the host, so oneCVE-2021-1066 · NVIDIA vGPU Manager (vGPU plugin)Medium